WhatsApp Worm Spreads Astaroth Banking Trojan Across Brazil via Contact Auto-Messaging

Jan 8, 2026

Cybersecurity researchers have disclosed details of a new campaign that uses WhatsApp as a distribution vector for a Windows banking trojan called Astaroth in attacks targeting Brazil.
The campaign has been codenamed Boto Cor-de-Rosa by Acronis Threat Research Unit.
“The malware retrieves the victim’s WhatsApp contact list and automatically sends malicious messages to each contact to further

Get Free Report & Network Analysis

Please check your email for the free report.