Skip to main content

Tag: brazil

31 articles

Python-Based WhatsApp Worm Exclusive: Dangerous Stealer

Python-Based WhatsApp Worm Exclusive: Dangerous Stealer

What would you do if your WhatsApp started messaging your friends without you? Researchers warn the Delphi-based Eternidade Stealer is hijacking accounts and weaponizing contact lists—using social engineering and IMAP-resolved C2 to spread quickly and dodge static defenses.

Analyst 207
Eternidade Stealer Trojan Exclusive Severe Cybercrime Surge

Eternidade Stealer Trojan Exclusive Severe Cybercrime Surge

Eternidade Stealer is a new banking trojan that weaponizes Brazil’s favorite app, WhatsApp, turning ordinary messages into a fast-moving credential theft campaign. Researchers warn one click can unleash downloaders that harvest browser-stored credentials and cookies, making everyday chats unexpectedly risky for users and businesses.

Analyst 207
WhatsApp Web automation: Risky Must-Have Threat

WhatsApp Web automation: Risky Must-Have Threat

What looked like handy WhatsApp Web productivity add-ons were actually 131 cloned Chrome extensions hijacked to blast spam across Brazil, reaching about 20,900 users before takedown. Socket’s investigation is a wake-up call—check extension reputations, limit permissions, and treat browser add-ons with the same caution you’d give any app that touches your messages.

Analyst 207
ransomware attack Devastating Threat to Brazilian Health

ransomware attack Devastating Threat to Brazilian Health

A ransomware attack by KillSec on Brazilian health‑care vendor MedicSolution has disrupted appointments, billing and medical records across multiple clinics, creating delays that could harm patients and strain clinicians. It’s a wake‑up call that hospitals and small clinics need stronger vendor security, backups and coordinated incident response to prevent repeat outages.

Analyst 207
GhostRedirector: Exclusive Dangerous IIS Backdoor Revealed

GhostRedirector: Exclusive Dangerous IIS Backdoor Revealed

Researchers uncovered GhostRedirector, a previously undocumented campaign that’s hit at least 65 Windows web servers in Brazil, Thailand and Vietnam by installing a C++ backdoor called Rungan plus a native IIS module to stealthily intercept or redirect traffic. If you run IIS, now’s the time to audit loaded modules, hunt for Rungan indicators, and lock down your servers before attackers turn your site into a covert gateway.

Analyst 207
steal $130 million: Stunning Risky Heist Exposed

steal $130 million: Stunning Risky Heist Exposed

Sinqia, one of Brazil’s largest fintech providers, says it stopped an attempt to steal about $130 million from two B2B partners. The near‑heist shows how vulnerable software‑based vaults can be and why hardening third‑party financial systems is urgent.

Analyst 207
Employee Receives $920 for Credentials Linked to $140 Million Bank Heist

Employee Receives $920 for Credentials Linked to $140 Million Bank Heist

Employee awarded $920 for credentials tied to a $140 million bank heist, highlighting the risks of insider threats in the financial sector.

Analyst 207