The attack consists of a NexShield malicious browser extension, a social engineering technique to crash the browser, and a Python-based RAT.
New WhatsApp Web attack spreads self-propagating ZIP files containing Astaroth banking malware through trusted conversations. Boto Cor-de-Rosa campaign tracks delivery success.