A new WhatsApp Web attack spreads self-propagating ZIP files containing Astaroth banking malware through trusted conversations. The Boto Cor-de-Rosa campaign tracks delivery success.