The new cyber threat, called Maverick, is intensifying in the Brazilian digital environment, using WhatsApp and its web version to steal banking data and personal information. Este malware is spread through malicious ZIP files, which, when opened, begin an infection process that compromises users’ security.
Kaspersky, one of the leading digital security companies, revealed that more than 62,000 infection attempts were recorded and blocked on Brasil in just the first ten days of October 2025. The attack is highly targeted in the country, taking advantage of the application’s vast user base to maximize its reach.
Once installed on a device, Maverick monitors activity, takes screenshots and creates fake pages to trick victims into collecting financial credentials. The rapid automatic spread via WhatsApp Web represents a growing danger, requiring increased attention from Internet users.
Mechanism of action of the Maverick virus
The Maverick virus begins its action when an unsuspecting user opens a compressed file (ZIP) received on WhatsApp. Este file contains a malicious shortcut that, when executed, installs the spy program on the device’s operating system. Social engineering is crucial to trick the victim into interacting with contaminated content.
After installation, the malware activates functions to collect sensitive data. Ele monitors user interactions, recording touches and accesses to banking applications. Adicionalmente, Maverick takes screenshots at strategic moments, obtaining passwords and financial information directly from the interface.
Automated propagation increases risks
The main feature that amplifies the threat of Maverick is its ability to self-replicate, especially through WhatsApp Web. Once infected, the malware uses the user’s active session to send the contaminated ZIP file to other contacts and groups.
This automatic dissemination method allows the virus to spread exponentially, quickly reaching a large number of potential victims. The speed of infection and the apparently “reliable” nature of the source make detection and containment a significant challenge.
Signs of infection and crucial preventative actions
Identification of a device infected by Maverick can be subtle, but signs such as slowness on the device, messages sent automatically and the appearance of suspicious alert windows are common signs. In case of suspicion, it is crucial to act quickly. Especialistas recommend immediately disconnecting the device from the internet to stop the malware from communicating and spreading. Then, a full scan should be carried out with updated antivirus software and, after removal, change all passwords for banking services, emails and social networks. Meta advises never to open unexpected files, even from known contacts, and to always confirm the legitimacy of any attachment or link through other channels.
Security recommendations for users
To protect themselves against attacks like Maverick, WhatsApp users must adopt a proactive stance. It is essential to verify the origin and purpose of any file or link received, even if the message appears to come from a trusted contact.
Confirming the veracity of suspicious messages can be done through other communication channels, such as a phone call, before interacting with the content. Essa simple precaution can prevent the activation of malware and the consequent exposure of data.
Installing and maintaining digital security programs, such as antivirus, are crucial for detecting and blocking threats. Manter This always-updated software guarantees protection against the latest malware variants.
Avoiding clicking on unknown links or downloading suspicious files is also an essential measure. Digital education and awareness of online risks are the first line of defense against cyberattacks.
Cyberattack scenario on Brasil in 2025
Brasil has been a frequent and priority target for cyberattack campaigns, as demonstrated by the action of Maverick in 2025. The large user base of messaging apps and the increasing digitalization of financial services create a ripe environment for cybercriminals. Kaspersky emphasizes that the national focus is not accidental, but a strategy based on the analysis of the behavior and vulnerabilities of local users.
The sophistication of these threats is constantly evolving, requiring users and technology companies to redouble their security efforts. Collaboration between cybersecurity companies and platforms like WhatsApp is essential to quickly identify new threats and develop effective countermeasures, protecting digital infrastructure and citizen data.
Strengthening digital protection
Effectively protecting devices and personal information goes beyond avoiding suspicious files; requires ongoing security practices. Enabling two-factor authentication on WhatsApp and other platforms adds an extra layer of security, making unauthorized access even if a password is compromised difficult.
Users should be cautious when sharing sensitive personal information via messages. Dados such as document numbers or bank details should not be sent via messaging apps without rigorous verification of the recipient’s identity.
Keeping operating systems, browsers and all applications up to date is an essential preventative measure. Updates fix security vulnerabilities that could be exploited by malware, such as Maverick, ensuring that the software always has the latest protections.
