Water Makara Campaign: A Sophisticated Spear-Phishing Attack on Brazilian Enterprises

Water Makara is a targeted spear‑phishing campaign against Brazilian enterprises that deploys the Astaroth infostealer via obfuscated JavaScript and fileless techniques; it leverages trusted Windows processes to evade detection, harvests credentials and personal data, and includes indicators of compromise (file hashes, C2 IPs, file paths, and registry keys). The report also provides mitigation and remediation guidance and cites SOCRadar’s monitoring services.