yes, the eternidade stealer trojan is a real and active threat spreading via whatsapp in brazil. it infects android devices through malicious files or links, steals contacts, spreads itself, and targets crypto wallets and banking apps.

trustwave spiderlabs report

https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/spiderlabs-ids-new-banking-trojan-distributed-through-whatsapp/

the hacker news

https://thehackernews.com/2025/11/python-based-whatsapp-worm-spreads.html

nostr:nevent1qqstn4g9nt9nqs5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q5q