New Eternidade Stealer Spreads Via WhatsApp to Steal Banking and Crypto Data
Source Reddit InfoSec News
Description
The Eternidade Stealer is a newly identified malware spreading via WhatsApp messages, targeting users to steal sensitive banking and cryptocurrency data. It propagates through social engineering by sending malicious links or files over WhatsApp, tricking users into executing the stealer. Once active, it harvests credentials and financial information from infected devices. Although no known exploits are reported in the wild yet, the malware poses a medium severity threat due to its potential impact on confidentiality and financial assets. European organizations with employees or customers using WhatsApp are at risk, especially those in banking and crypto sectors. Mitigation requires user awareness, endpoint protection, and network monitoring for suspicious WhatsApp traffic. Countries with high WhatsApp usage and significant financial sectors, such as the UK, Germany, France, Italy, and Spain, are more likely to be affected. The threat is assessed as medium severity given the need for user interaction and the targeted nature of the attack. Defenders should prioritize phishing education, multi-factor authentication, and rapid incident response capabilities to reduce risk.