{"id":18167,"date":"2025-11-20T03:40:46","date_gmt":"2025-11-20T02:40:46","guid":{"rendered":"https:\/\/wsj-crypto.com\/?p=18167"},"modified":"2025-11-20T03:40:46","modified_gmt":"2025-11-20T02:40:46","slug":"whatsapp-worm-unleashes-eternidade-stealer-banking-trojan-in-brazil","status":"publish","type":"post","link":"https:\/\/wsj-crypto.com\/index.php\/2025\/11\/20\/whatsapp-worm-unleashes-eternidade-stealer-banking-trojan-in-brazil\/","title":{"rendered":"“WhatsApp Worm Unleashes Eternidade Stealer Banking Trojan in Brazil”"},"content":{"rendered":"

“`html
\n<\/p>\n

\n

Hey there, Brazilian crypto enthusiasts! It\u2019s time to stay alert! A new cyber threat is lurking around, and it’s a clever hacking scheme featuring a hijacking worm and a sneaky banking trojan being passed around via WhatsApp messages.<\/p>\n

Trustwave\u2019s cybersecurity team, SpiderLabs, has released a report, and it\u2019s worth your attention. The banking trojan, called \u201cEternidade Stealer,\u201d is making the rounds through social engineering<\/a> tactics on WhatsApp<\/a>. Watch out for tricky messages that might look like \u201cfake government programs, delivery notifications,\u201d or even notes from friends and fake investment groups.<\/p>\n

Researchers Nathaniel Morales, John Basmayor, and Nikita Kazymirskyi from SpiderLabs highlighted that \u201cWhatsApp is one of the most exploited channels for cybercrime in Brazil. Over the last couple of years, bad actors have sharpened their techniques, taking advantage of the app’s vast popularity to spread banking trojans and info-stealing malware.\u201d<\/p>\n

Here\u2019s the lowdown: clicking the worm link in WhatsApp kicks off a chain reaction that infects your device with both the worm and the banking trojan. The worm gains access to your account and collects your contact list, cleverly ignoring business contacts to focus on individual friends for better chances of success.<\/p>\n

Meanwhile, the banking trojan secretly downloads itself onto your device, running the Eternidade Stealer in the background. This little bugger can hunt for financial data and login information<\/a> for various Brazilian banks and crypto platforms.<\/p>\n

Check out this infographic showing how the malware strikes and spreads! Source: <\/em>SpiderLabs<\/em><\/a><\/figcaption><\/figure>\n

Related: <\/strong><\/em>Crypto private key theft is now big business: Here\u2019s what to know<\/strong><\/em><\/a><\/p>\n

But wait, there\u2019s more! This malware has a sneaky way of avoiding detection. Instead of using a fixed server address, it checks in with a pre-set Gmail account for new commands. This clever trick allows hackers to change their plans by just sending new emails.<\/p>\n

\u201cA standout feature of this malware is its hardcoded credentials for logging into its email account to retrieve commands. It\u2019s a smart tactic to keep going undetected and stay one step ahead,\u201d the report stated.<\/p>\n

According to crypto analytics platform Chainalysis, Brazil leads the way in crypto adoption in Latin America and currently sits in the fifth spot on the company\u2019s 2025 Global Crypto Adoption Index Top 20.<\/p>\n

This index measures the use of various crypto services and factors in population size and purchasing power\u2014a true reflection of how much people are getting into crypto!<\/p>\n

Stay Safe Out There!<\/h2>\n

So, what should you do to keep your crypto safe? If you use WhatsApp, be super cautious about clicking on any links you receive, even from friends!<\/p>\n

A smart move is to shoot them a message on another app to double-check if that link is safe. Always be wary of any links that pop up unexpectedly with little context.<\/p>\n

Keep your software updated to fend off bugs that might target older versions, and consider using anti-virus software to detect potential issues.<\/p>\n

If you do get hacked, act fast! Immediately freeze your banking and crypto access points to stop any potential losses. Tracking where your funds go can also assist exchanges, researchers, or authorities in freezing the hacker\u2019s wallets.<\/p>\n

Magazine: <\/strong><\/em>\u2018Help! My robot vac is stealing my Bitcoin\u2019: When smart devices attack<\/strong><\/em><\/a><\/p>\n