A sophisticated cyberattack is targeting Brazilian cryptocurrency holders and bank users via WhatsApp, utilizing a worm and a banking trojan known as 'Eternidade Stealer.' The attack spreads through social engineering messages, including fake government notices and delivery alerts. Once a user clicks on a malicious link, the worm and trojan infect the device, stealing contact lists and financial data from banks, fintechs, and crypto platforms. The malware evades detection by receiving commands through a Gmail account. Users are urged to avoid suspicious links, verify them through other apps, and use antivirus tools. If compromised, freezing financial access and tracking fund movements is recommended.