Maverick Malware: Hijacks WhatsApp to Target Brazilian Banks

Maverick, a banking malware similar to Coyote, spreads via WhatsApp Web using SORVEPOTEL to hijack browser sessions and distribute ZIP files. It targets Brazilian users, monitoring banking URLs and stealing credentials through phishing pages.

The malware uses PowerShell and VB Script, disables defenses, and employs IMAP-based C2 for commands like info gathering, file operations, and screenshots. Linked to Water Saci, it exploits WhatsApp's popularity in Brazil (148 million users) for scalable attacks.

Protect yourself: Avoid suspicious downloads, enable MFA, and use antivirus. This highlights risks in messaging apps for financial fraud.

NPAV offers a robust solution to combat cyber fraud. Protect yourself with our top-tier security product, FraudProtector.net