WhatsApp compromise leads to Astaroth deployment
Sophos analysts are investigating a persistent, multi-stage malware distribution campaign targeting WhatsApp users in Brazil. First observed on September 24,...
Astaroth
Astaroth Trojan abuses GitHub to host configs and evade takedowns
Astaroth Trojan abuses GitHub to host configs and evade takedowns Pierluigi Paganini October 13, 2025 The Astaroth banking Trojan uses...
Water Dolphin Utilizes Encoded JavaScript in Phishing Scheme, Focuses on Brazil Using Astaroth Malware
We identify this breach operation as Water Dolphin, employing the Astaroth virus with an innovative evasion strategy. Astaroth, a well-known...
