Category: infostealer
-
WhatsApp compromise leads to Astaroth deployment
WhatsApp compromise leads to Astaroth deployment Another campaign targeting WhatsApp users in Brazil spreads like a worm and employs multiple payloads for credential theft, session hijacking, and persistence Mindi McDowell Go to sophos
-
Threat Intelligence Executive Report – Volume 2025, Number 5
Threat Intelligence Executive Report – Volume 2025, Number 5 This issue of the Counter Threat Unit’s high-level bimonthly report discusses noteworthy updates in the threat landscape during July and August mindimcdowell Go to sophos
-
WhatsApp Worm Targets Brazilian Banking Customers
WhatsApp Worm Targets Brazilian Banking Customers Counter Threat Unit™ (CTU) researchers are investigating multiple incidents in an ongoing campaign targeting users of the WhatsApp messaging platform. The campaign, which started on September 29, 2025, is focused on Brazil and seeks to trick users into executing a malicious file attached to a self-spreading message received from…