{"id":17663,"date":"2025-11-20T16:30:13","date_gmt":"2025-11-20T16:30:13","guid":{"rendered":"https:\/\/www.coinspeaker.com\/fr\/?p=17663"},"modified":"2025-11-20T15:13:43","modified_gmt":"2025-11-20T15:13:43","slug":"whatsapp-ver-bresil-crypto","status":"publish","type":"post","link":"https:\/\/www.coinspeaker.com\/fr\/whatsapp-ver-bresil-crypto\/","title":{"rendered":"Alerte WhatsApp : un virus d\u00e9tourne des wallets crypto au Br\u00e9sil"},"content":{"rendered":"<h2>Un ver WhatsApp taill\u00e9 pour l&rsquo;\u00e9cosyst\u00e8me br\u00e9silien<\/h2>\n<p>Des groupes de cybercriminels utilisent l&rsquo;application de messagerie pour diffuser un ver et un trojan bancaire con\u00e7us pour siphonner donn\u00e9es financi\u00e8res et acc\u00e8s aux wallets.<\/p>\n<p>Les messages malveillants reprennent les codes habituels de l&rsquo;ing\u00e9nierie sociale : faux programmes gouvernementaux, notifications de livraison, groupes d&rsquo;investissement bidons, ou simples liens envoy\u00e9s depuis un contact compromis.<\/p>\n<p>Pour un utilisateur, le sc\u00e9nario ressemble \u00e0 une conversation classique.<\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"474\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">GM. There is a WhatsApp virus that could steal your mobile crypto wallet \ud83d\udc47\ud83c\udffc<\/p>\n<p>&quot;To stay safe from Eternidade Stealer, avoid opening unknown attachments in WhatsApp. It doesn&#39;t infect just by receiving a message, you must download and execute the malicious file (like a VBS script)\u2026 <a rel=\"noopener noreferrer\" target=\"_blank\" rel=\"noopener nofollow sponsored\" href=\"https:\/\/t.co\/02mAyUsK2K\">pic.twitter.com\/02mAyUsK2K<\/a><\/p>\n<p>&mdash; Felipe Servin \u26a1\ufe0f (@fservin) <a rel=\"noopener noreferrer\" target=\"_blank\" rel=\"noopener nofollow sponsored\" href=\"https:\/\/twitter.com\/fservin\/status\/1991514838288257324?ref_src=twsrc%5Etfw\">November 20, 2025<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>La diff\u00e9rence tient dans un clic de trop. Les chercheurs rappellent que WhatsApp reste l&rsquo;un des canaux les plus exploit\u00e9s par la cybercriminalit\u00e9 au <a href=\"https:\/\/www.coinspeaker.com\/fr\/bresil-taxe-crypto\/\">Br\u00e9sil<\/a>.<\/p>\n<h2>Un trojan bancaire qui aime aussi la crypto<\/h2>\n<p>Derri\u00e8re le lien cliqu\u00e9 se cache un encha\u00eenement discret. <strong>Le ver s&rsquo;installe d&rsquo;abord sur l&rsquo;appareil<\/strong>, prend le contr\u00f4le du compte WhatsApp de la victime et r\u00e9cup\u00e8re la liste de contacts.<\/p>\n<p>Il applique un filtrage pour \u00e9viter les comptes professionnels ou certains groupes, afin de cibler surtout des personnes physiques qui auront plus tendance \u00e0 cliquer sans se m\u00e9fier. En parall\u00e8le, un fichier malveillant est t\u00e9l\u00e9charg\u00e9 sur le terminal.<\/p>\n<p>C&rsquo;est lui qui d\u00e9ploie Eternidade Stealer, un trojan bancaire d\u00e9j\u00e0 connu, ajust\u00e9 ici pour le contexte br\u00e9silien.<\/p>\n<p>Concr\u00e8tement, cela peut toucher des applications de banque en ligne, des passerelles de paiement ou les applis d&rsquo;exchange et de <a href=\"https:\/\/www.coinspeaker.com\/fr\/guides\/meilleur-wallet-crypto-gratuit\/\">wallets<\/a> que l&rsquo;utilisateur ouvre au quotidien.<\/p>\n<h2>Une architecture pens\u00e9e pour \u00e9viter le shutdown<\/h2>\n<p>L&rsquo;un des aspects qui inqui\u00e8te le plus les chercheurs concerne la mani\u00e8re dont le malware communique avec son centre de commande. <strong>Au lieu d&rsquo;utiliser un serveur fixe, facilement bloquable<\/strong>, la campagne s&rsquo;appuie sur un compte Gmail pr\u00e9configur\u00e9.<\/p>\n<p>Le logiciel se connecte \u00e0 cette bo\u00eete mail avec des identifiants cod\u00e9s en dur, r\u00e9cup\u00e8re les instructions et l&rsquo;adresse de son serveur de contr\u00f4le dans les messages re\u00e7us. Ce choix offre plusieurs avantages aux attaquants.<\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"474\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">\ud83d\udea8 A new WhatsApp worm is spreading fast in Brazil.<\/p>\n<p>It hijacks chats, sends fake messages to all your contacts, and installs a program that steals bank and crypto logins.<\/p>\n<p>&#8230; and it updates itself through an email inbox to stay hidden.<\/p>\n<p>Read here \u2193 <a rel=\"noopener noreferrer\" target=\"_blank\" rel=\"noopener nofollow sponsored\" href=\"https:\/\/t.co\/YuJ9pgC8rg\">https:\/\/t.co\/YuJ9pgC8rg<\/a><\/p>\n<p>&mdash; The Hacker News (@TheHackersNews) <a rel=\"noopener noreferrer\" target=\"_blank\" rel=\"noopener nofollow sponsored\" href=\"https:\/\/twitter.com\/TheHackersNews\/status\/1991169028069667130?ref_src=twsrc%5Etfw\">November 19, 2025<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>Ils peuvent changer les commandes simplement en envoyant un nouveau mail. La communication se fond dans un trafic chiffr\u00e9 banal aux yeux de nombreux syst\u00e8mes de d\u00e9tection.<\/p>\n<p>Et si la connexion \u00e0 cette adresse \u00e9choue, le malware dispose en plus d&rsquo;une adresse de secours int\u00e9gr\u00e9e dans son code. Pour les \u00e9quipes de s\u00e9curit\u00e9 r\u00e9seau, cette approche complique le travail.<\/p>\n<p>Il ne suffit plus de couper un seul domaine ou une seule IP. Le trafic a l&rsquo;air l\u00e9gitime, passe par des services courants, et le malware reste capable de s&rsquo;adapter.<\/p>\n<h2>Comment limiter le risque sur WhatsApp et ailleurs<\/h2>\n<p>Pour les utilisateurs, le premier filtre reste comportemental. Tout lien re\u00e7u sur WhatsApp, m\u00eame envoy\u00e9 par un ami ou un membre de la famille, doit \u00eatre consid\u00e9r\u00e9 comme suspect s&rsquo;il arrive sans contexte clair ou avec un message trop g\u00e9n\u00e9rique.<\/p>\n<p>\u00c9viter de stocker de gros montants sur un t\u00e9l\u00e9phone ou un navigateur peu s\u00e9curis\u00e9. Ne jamais conserver sa seed phrase en clair dans une note, un email ou un cloud synchronis\u00e9.<\/p>\n<p>S\u00e9parer les montants \u00ab\u00a0du quotidien\u00a0\u00bb de l&rsquo;\u00e9pargne de long terme, id\u00e9alement sur un hardware wallet. En cas de doute ou de compromission av\u00e9r\u00e9e, la r\u00e9action doit \u00eatre rapide. Blocage des acc\u00e8s bancaires, contact imm\u00e9diat avec les <a href=\"https:\/\/trustwave.com\/en-us\/resources\/blogs\/spiderlabs-blog\/spiderlabs-ids-new-banking-trojan-distributed-through-whatsapp\/\" target=\"_blank\" rel=\"noopener\">plateformes utilis\u00e9es<\/a> et migration des fonds vers de nouveaux wallets.<\/p>\n<p>Plus l&rsquo;intervalle entre la fuite et la r\u00e9action est court, plus les chances de limiter la casse augmentent. <strong>L&rsquo;\u00e9pisode du ver WhatsApp br\u00e9silien ne r\u00e9v\u00e8le pas une nouvelle faiblesse technique propre \u00e0 la blockchain.<\/strong><\/p>\n<p>Il rappelle surtout que le maillon le plus fragile reste souvent l&rsquo;utilisateur et son appareil. Les outils de s\u00e9curit\u00e9 progressent, mais les campagnes d&rsquo;ing\u00e9nierie sociale aussi.<\/p>\n<hr \/>\n<p>\u00c0 lire aussi :<\/p>\n<ul>\n<li><a href=\"https:\/\/www.coinspeaker.com\/fr\/vols-crypto-2025-2-milliards\/\">Vols crypto : plus de 2 Md$ d\u00e9rob\u00e9s en 2025<\/a><\/li>\n<li><a href=\"https:\/\/www.coinspeaker.com\/fr\/10-millions-ciblees-malwares-crypto\/\">10 millions de personnes cibl\u00e9es par des malwares pour crypto<\/a><\/li>\n<li><a href=\"https:\/\/www.coinspeaker.com\/fr\/aave-attaque-phishing-google-ads\/\">Aave frapp\u00e9 par une attaque de phishing via Google Ads<\/a><\/li>\n<\/ul>\n<a class=\"infinscroll_next_page_link\" style=\"display:none\" href=\"https:\/\/www.coinspeaker.com\/fr\/wlfi-wallets-geles\/\" rel=\"prev\">next<\/a>","protected":false},"excerpt":{"rendered":"<p>Les d\u00e9tenteurs de crypto au Br\u00e9sil sont dans le viseur d&rsquo;une campagne de hacking particuli\u00e8rement travaill\u00e9e qui se propage via WhatsApp.<\/p>\n","protected":false},"author":200,"featured_media":17666,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-17663","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-actu"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v25.7 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Alerte WhatsApp : un virus d\u00e9tourne des wallets crypto au Br\u00e9sil<\/title>\n<meta name=\"description\" content=\"Un ver WhatsApp propage un trojan bancaire au Br\u00e9sil, ciblant wallets crypto et comptes bancaires via de faux messages.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.coinspeaker.com\/fr\/whatsapp-ver-bresil-crypto\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Alerte WhatsApp : un virus d\u00e9tourne des wallets crypto au Br\u00e9sil\" \/>\n<meta property=\"og:description\" content=\"Un ver WhatsApp propage un trojan bancaire au Br\u00e9sil, ciblant wallets crypto et comptes bancaires via de faux messages.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.coinspeaker.com\/fr\/whatsapp-ver-bresil-crypto\/\" \/>\n<meta property=\"og:site_name\" content=\"Coinspeaker France\" \/>\n<meta property=\"article:published_time\" content=\"2025-11-20T16:30:13+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.coinspeaker.com\/fr\/wp-content\/uploads\/sites\/6\/2025\/11\/Copie-de-Coinspeaker129.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"800\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Emmanuel Roux\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Emmanuel Roux\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Alerte WhatsApp : un virus d\u00e9tourne des wallets crypto au Br\u00e9sil","description":"Un ver WhatsApp propage un trojan bancaire au Br\u00e9sil, ciblant wallets crypto et comptes bancaires via de faux messages.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.coinspeaker.com\/fr\/whatsapp-ver-bresil-crypto\/","og_locale":"fr_FR","og_type":"article","og_title":"Alerte WhatsApp : un virus d\u00e9tourne des wallets crypto au Br\u00e9sil","og_description":"Un ver WhatsApp propage un trojan bancaire au Br\u00e9sil, ciblant wallets crypto et comptes bancaires via de faux messages.","og_url":"https:\/\/www.coinspeaker.com\/fr\/whatsapp-ver-bresil-crypto\/","og_site_name":"Coinspeaker France","article_published_time":"2025-11-20T16:30:13+00:00","og_image":[{"width":1200,"height":800,"url":"https:\/\/www.coinspeaker.com\/fr\/wp-content\/uploads\/sites\/6\/2025\/11\/Copie-de-Coinspeaker129.jpg","type":"image\/jpeg"}],"author":"Emmanuel Roux","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Emmanuel Roux","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.coinspeaker.com\/fr\/whatsapp-ver-bresil-crypto\/","url":"https:\/\/www.coinspeaker.com\/fr\/whatsapp-ver-bresil-crypto\/","name":"Alerte WhatsApp : un virus d\u00e9tourne des wallets crypto au Br\u00e9sil","isPartOf":{"@id":"https:\/\/www.coinspeaker.com\/fr\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.coinspeaker.com\/fr\/whatsapp-ver-bresil-crypto\/#primaryimage"},"image":{"@id":"https:\/\/www.coinspeaker.com\/fr\/whatsapp-ver-bresil-crypto\/#primaryimage"},"thumbnailUrl":"https:\/\/www.coinspeaker.com\/fr\/wp-content\/uploads\/sites\/6\/2025\/11\/Copie-de-Coinspeaker129.jpg","datePublished":"2025-11-20T16:30:13+00:00","author":{"@id":"https:\/\/www.coinspeaker.com\/fr\/#\/schema\/person\/d793ce3fffd1844b1bf840021a85dd43"},"description":"Un ver WhatsApp propage un trojan bancaire au Br\u00e9sil, ciblant wallets crypto et comptes bancaires via de faux messages.","breadcrumb":{"@id":"https:\/\/www.coinspeaker.com\/fr\/whatsapp-ver-bresil-crypto\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.coinspeaker.com\/fr\/whatsapp-ver-bresil-crypto\/"]}]},{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/www.coinspeaker.com\/fr\/whatsapp-ver-bresil-crypto\/#primaryimage","url":"https:\/\/www.coinspeaker.com\/fr\/wp-content\/uploads\/sites\/6\/2025\/11\/Copie-de-Coinspeaker129.jpg","contentUrl":"https:\/\/www.coinspeaker.com\/fr\/wp-content\/uploads\/sites\/6\/2025\/11\/Copie-de-Coinspeaker129.jpg","width":1200,"height":800},{"@type":"BreadcrumbList","@id":"https:\/\/www.coinspeaker.com\/fr\/whatsapp-ver-bresil-crypto\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.coinspeaker.com\/fr\/"},{"@type":"ListItem","position":2,"name":"Alerte WhatsApp : un virus d\u00e9tourne des wallets crypto au Br\u00e9sil"}]},{"@type":"WebSite","@id":"https:\/\/www.coinspeaker.com\/fr\/#website","url":"https:\/\/www.coinspeaker.com\/fr\/","name":"Coinspeaker France","description":"Bitcoin, Ethereum, Altcoins et actualit\u00e9s crypto avec analyses, cours en direct, graphiques de donn\u00e9es et guides","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.coinspeaker.com\/fr\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Person","@id":"https:\/\/www.coinspeaker.com\/fr\/#\/schema\/person\/d793ce3fffd1844b1bf840021a85dd43","name":"Emmanuel Roux","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/www.coinspeaker.com\/fr\/#\/schema\/person\/image\/","url":"https:\/\/www.coinspeaker.com\/fr\/wp-content\/uploads\/sites\/6\/2025\/06\/cropped-pp-1-96x96.png","contentUrl":"https:\/\/www.coinspeaker.com\/fr\/wp-content\/uploads\/sites\/6\/2025\/06\/cropped-pp-1-96x96.png","caption":"Emmanuel Roux"},"description":"Issu de la finance traditionnelle, j\u2019ai naturellement bascul\u00e9 vers l\u2019univers crypto, attir\u00e9 par son potentiel. Je souhaite y apporter mon approche analytique et rationnelle, tout en conservant ma curiosit\u00e9. En dehors de l\u2019\u00e9cran, je lis beaucoup (\u00e9conomie, essais, un peu de science-fiction) et je prends plaisir \u00e0 bricoler. Le DIY, pour moi, c\u2019est comme la crypto : comprendre, tester, construire soi-m\u00eame.","url":"https:\/\/www.coinspeaker.com\/fr\/author\/emmanuel\/"}]}},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.coinspeaker.com\/fr\/wp-json\/wp\/v2\/posts\/17663","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.coinspeaker.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.coinspeaker.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.coinspeaker.com\/fr\/wp-json\/wp\/v2\/users\/200"}],"replies":[{"embeddable":true,"href":"https:\/\/www.coinspeaker.com\/fr\/wp-json\/wp\/v2\/comments?post=17663"}],"version-history":[{"count":3,"href":"https:\/\/www.coinspeaker.com\/fr\/wp-json\/wp\/v2\/posts\/17663\/revisions"}],"predecessor-version":[{"id":17712,"href":"https:\/\/www.coinspeaker.com\/fr\/wp-json\/wp\/v2\/posts\/17663\/revisions\/17712"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.coinspeaker.com\/fr\/wp-json\/wp\/v2\/media\/17666"}],"wp:attachment":[{"href":"https:\/\/www.coinspeaker.com\/fr\/wp-json\/wp\/v2\/media?parent=17663"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.coinspeaker.com\/fr\/wp-json\/wp\/v2\/categories?post=17663"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.coinspeaker.com\/fr\/wp-json\/wp\/v2\/tags?post=17663"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}