Cybersecurity experts report a malware campaign targeting WhatsApp Web users to steal banking passwords. The infection spreads through malicious ZIP files sent in WhatsApp messages, hijacking sessions to propagate further and harvest contacts. The trojan, named Boto Cor-de-Rosa, primarily targets Brazilian users with phishing messages in Portuguese and employs dual modules for credential theft and self-spreading.