Connect with us

Technology

WhatsApp Web malware spreads banking trojan automatically

Published

on

WhatsApp Web malware spreads banking trojan automatically

NEWYou can now listen to Fox News articles!

A new malware campaign is turning WhatsApp Web into a weapon. Security researchers say a banking Trojan linked to Astaroth is now spreading automatically through chat messages, making the attack harder to stop once it starts. 

The campaign is known as Boto Cor-de-Rosa. It shows how cybercriminals keep evolving, especially when they can abuse tools people trust every day. This attack focuses on Windows users and uses WhatsApp Web as both the delivery system and the engine that spreads the infection further.

Sign up for my FREE CyberGuy Report

Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.

Advertisement

BROWSER EXTENSION MALWARE INFECTED 8.8M USERS IN DARKSPECTRE ATTACK

Attackers abuse WhatsApp Web to spread malware through messages that appear to come from people you trust. (Kurt “CyberGuy” Knutsson)

How this WhatsApp Web attack works

The attack starts with a simple message. A contact sends what looks like a routine ZIP file through WhatsApp. The file name appears random and harmless, which lowers suspicion. Once opened, the ZIP contains a Visual Basic script disguised as a normal document. If the user runs it, the script quietly pulls in two more pieces of malware. Then the script downloads the Astaroth banking malware written in Delphi. It also installs a Python-based module designed to control WhatsApp Web. Both components run in the background without obvious warning signs. From there, the infection becomes self-sustaining.

Malware that spreads itself through your contacts

What makes this campaign especially dangerous is how it propagates. The Python module scans the victim’s WhatsApp contacts and sends the malicious ZIP file to every conversation automatically. Researchers at Acronis found that the malware adapts its messages based on the time of day. It sends friendly greetings, making the message feel normal and familiar. The text reads, “Here is the requested file. If you have any questions, I’m available!” Because the message appears to come from someone you know, many people open it without hesitation.

NEW MALWARE CAN READ YOUR CHATS AND STEAL YOUR MONEY

Advertisement

A single ZIP file sent through chat can quietly install banking malware and begin spreading to every contact. (Kurt “CyberGuy” Knutsson)

Built-in tracking keeps the attack efficient

This malware is carefully designed to monitor its own performance in real time. The propagation tool tracks how many messages are successfully delivered, how many fail to send, and the overall sending speed measured per minute. After every 50 messages, it generates progress updates that show how many contacts have been reached. This feedback allows attackers to measure success quickly and make adjustments if something stops working.

What happens after infection

The initial script is heavily obfuscated to avoid detection by antivirus tools. Once it runs, it launches PowerShell commands that download more malware from compromised websites. One known domain used in this campaign is coffe-estilo.com. The malware installs itself inside a folder that mimics a Microsoft Edge cache directory. Inside are executable files and libraries that make up the full Astaroth banking payload. From there, the malware can steal credentials, monitor activity and potentially access financial accounts.

Why WhatsApp Web is being abused

WhatsApp Web is popular because it mirrors your phone conversations on a computer. That convenience makes it easy to send messages, share files and type faster, but it also introduces risk. When you use WhatsApp Web, you link your phone to a browser by scanning a QR code at web.whatsapp.com. Once connected, that browser session becomes a trusted extension of your account. Your chats appear on the screen, messages you send come from your real number and incoming messages sync across both devices.

That setup is exactly what attackers take advantage of. If malware gains access to a computer with WhatsApp Web logged in, it can act as the user. It can read messages, access contact lists and send files or links that look completely legitimate. The messages do not raise alarms because they are coming from a real account, not a fake one.

Advertisement

This is what turns WhatsApp Web into an effective delivery system for malware. Instead of breaking into WhatsApp itself, attackers simply abuse an open browser session to spread malicious files automatically. Many users do not realize the danger because WhatsApp Web feels harmless. It is often left signed in on work computers, shared devices or systems without strong security. In those situations, malware does not need advanced tricks. It only needs access to an already trusted session. That combination of convenience and trust is why WhatsApp Web has become such an attractive target.

MALICIOUS MAC EXTENSIONS STEAL CRYPTO WALLETS AND PASSWORDS

Once WhatsApp Web is compromised, malware can act like the user, sending messages and files that look completely legitimate.  (Kurt “CyberGuy” Knutsson)

How to stay safe from WhatsApp Web malware

Attacks like this WhatsApp Web malware are designed to spread fast through trusted conversations. A few smart habits can dramatically lower your risk.

1) Be skeptical of unexpected attachments

Messaging apps feel casual, which is exactly why attackers use them. Never open ZIP files sent through chat unless you confirm with the sender first. Watch for file names made of random numbers or unfamiliar names. Treat messages that create urgency or feel overly familiar as a warning sign. If a file arrives out of nowhere, pause before clicking.

Advertisement

2) Lock down WhatsApp Web access

This campaign abuses WhatsApp Web to spread automatically once a device is infected. Check active WhatsApp Web sessions and log out of any you do not recognize. Avoid leaving WhatsApp Web signed in on shared or public computers. Enable two-factor authentication (2FA) inside WhatsApp settings. Cutting off Web access helps limit how far malware can travel.

3) Keep your Windows PC locked down and use strong antivirus software 

This type of malware takes advantage of systems that fall behind on updates. Install Windows updates as soon as they are available. Also, keep your web browser fully updated. Staying current closes many of the doors attackers try to slip through. In addition, use strong antivirus software that watches for script abuse and PowerShell activity in real time.

The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.

Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com.

4) Limit how much of your personal data is online

Banking malware often pairs with identity theft and financial fraud. One way to reduce the fallout is by shrinking your digital footprint. A data removal service can help remove your personal information from data broker sites that attackers often search. With less information available, criminals have fewer details to exploit if malware reaches your device.

Advertisement

While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.

Get a free scan to find out if your personal information is already out on the web: Cyberguy.com

5) Add identity theft protection for extra coverage

Even with strong security habits, financial monitoring adds another layer of protection. An identity theft protection service can watch for suspicious activity tied to your credit and personal data. Identity theft companies can monitor personal information like your Social Security number (SSN), phone number, and email address, and alert you if it is being sold on the dark web or being used to open an account. They can also assist you in freezing your bank and credit card accounts to prevent further unauthorized use by criminals.

You should also turn on alerts for bank and credit card transactions so you are notified quickly if something looks wrong. The less exposed your data is, the fewer opportunities attackers have to cause damage.

Advertisement

See my tips and best picks on how to protect yourself from identity theft at Cyberguy.com.

6) Slow down and trust your instincts

Most malware infections happen because people act too quickly. If a message feels off, trust that instinct. Familiar names and friendly language can lower your guard, but they should never replace caution. Take a moment to verify the message or file before opening anything. Attackers rely on trust and urgency to succeed. Slowing down takes away their advantage.

Kurt’s key takeaways

This WhatsApp Web malware campaign is a reminder that cyberattacks no longer rely on obvious red flags. Instead, they blend into everyday conversations and use familiar tools to spread quietly and quickly. What makes this threat especially concerning is how little effort it takes for it to move from one device to dozens of others. A single click can turn a trusted chat into a delivery system for banking malware and identity theft. The good news is that small changes make a big difference. Paying attention to attachments, locking down WhatsApp Web access, keeping devices updated and slowing down before clicking can stop these attacks cold. As messaging platforms continue to play a bigger role in daily life, staying alert is no longer optional. Awareness and simple habits remain some of the strongest defenses you have.

Do you think messaging apps are doing enough to protect users from malware that spreads through trusted conversations?  Let us know by writing to us at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Advertisement

Sign up for my FREE CyberGuy Report 

Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter. 

Copyright 2026 CyberGuy.com.  All rights reserved.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Technology

Bionic hands are now teaching robots to feel

Published

on

Bionic hands are now teaching robots to feel

NEWYou can now listen to Fox News articles!

Robots have gotten very good at moving fast, repeating steps and doing jobs that would wear you and me out. But ask a robot to pick up something delicate, oddly shaped or slightly different from the last item it handled, and things can get a little complicated quickly.

That is where a new collaboration between ABB Robotics and PSYONIC comes in. ABB Robotics is working with PSYONIC, a California bionics company, to explore whether real-world touch and motion data from human prosthetic use can help train robotic arms.

In other words, the same kind of bionic hand that helps a person grip a tool, pick up a fragile object or adjust pressure in real time could help teach robots how to do those tasks better.

Sign up for my FREE CyberGuy Report

Advertisement
  • Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
  • For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com trusted by millions who watch CyberGuy on TV daily.
  • Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join. 

SOFT ROBOTIC ARMBAND GIVES PROSTHETIC HAND USERS NATURAL CONTROL

The PSYONIC Ability Hand can capture touch, motion and grip-force data from real human prosthetic use. (ABB Robotics)

How a bionic hand could teach a robot

The collaboration centers on PSYONIC’s Ability Hand and ABB’s GoFa cobot. The Ability Hand was originally developed for prosthetic use. It has multi-articulating fingers, pressure sensors, vibration feedback and flexible mechanics that help it conform to irregular objects. That combination is important because human grip isn’tt one fixed action. You hold a coffee cup differently than a screwdriver. You handle an egg differently than a phone. Most of us do that without thinking about it.

For robots, that instinctive adjustment is hard. ABB and PSYONIC want to explore how movement, contact and grip-force data from the Ability Hand can help train robots to handle objects that are fragile, uneven or unpredictable. ABB’s GoFa cobot brings the industrial side of the equation, offering the accuracy and repeatability needed to test those movements in a controlled way. The result could be a robot arm that learns from real human handling data, then applies that information to factory and warehouse tasks.

Why robot grip is such a hard problem

Industrial robots can already lift, move, weld, sort and assemble with impressive speed. However, many still struggle when a task involves subtle touch. Think about a robot picking up a soft package, a medical component or a part that shifts slightly on a conveyor belt. Too much pressure can damage the item. Too little pressure can make the robot drop it. A tiny change in angle can throw off the whole process.

JOB-KILLING ROBOT LEARNS AT WORK, AND IT’S COMING TO THE FACTORY FLOOR

Advertisement

That is why gripping and dexterity remain major challenges in automation. ABB calls this a key part of Autonomous Versatile Robotics, or AVR, its vision for robots that can sense, reason, move and handle objects with precision in changing environments.

Marc Segura, president of ABB Robotics, put it this way: Human dexterity remains “one of the most difficult things to replicate in industrial-grade robotics.” He said the collaboration with PSYONIC could help “close the long-standing gap” between human and robot dexterity. That gap is where this technology could make a real difference.

What makes the PSYONIC Ability Hand different

The PSYONIC Ability Hand was built to help people. It uses myoelectric control, touch sensing and compliant mechanics in a lightweight design. Its sensors can detect pressure during a grip, while vibration feedback can help communicate touch back to the person using it. That same sensing ability could be valuable for robots.

AI ENABLES PARALYZED MAN TO CONTROL ROBOTIC ARM WITH BRAIN SIGNALS

PSYONIC says the Ability Hand can capture detailed data about movement, contact and grip force. When that hand is used by people in real-world situations, it can generate a more natural dataset than a lab-only robot demonstration.

Advertisement

ABB’s GoFa cobot is being used to test how bionic hand data could help robots handle delicate and irregular objects. (ABB Robotics)

Dr. Aadeel Akhtar, founder and CEO of PSYONIC, called dexterous manipulation “a data challenge as much as a hardware challenge.” That line really gets to the heart of this. Better robot hands are important. Yet the training data behind those hands may be what decides how useful they become in real workplaces.

Where bionic hand data could show up first

ABB and PSYONIC say this work could apply across automotive, aerospace, packaging, logistics and life sciences. That makes sense. These are industries where robots already play a major role, but where delicate or variable handling can still slow things down. A robot that can better adjust its grip could help with fragile components, oddly shaped products, soft packaging or repetitive tasks that are tough on the body.

HUMANOID ROBOTS HANDLE QUALITY CHECKS AND ASSEMBLY AT AUTO PLANT

The International Federation of Robotics has also pointed to advanced gripping and digital integration as a way to reduce engineering time by up to 30%. That’s important for companies because automation often gets delayed by setup, tuning and custom engineering. If touch-enabled robotic hands can reduce some of that work, companies could deploy robots faster and use them in more flexible ways.

Advertisement

How touch-trained robots could change factory work

There is a hopeful side to this. Robots that handle repetitive or ergonomically challenging work could reduce strain on people. That could mean fewer workers stuck doing the same painful motion all day. However, there is also a bigger labor question here. More capable robots could take on tasks that once seemed too variable to automate. That may affect how companies hire, train and assign work in the future.

The most useful version of this technology would support people instead of simply replacing them. For example, robots could handle the repetitive gripping while workers focus on oversight, quality checks, machine setup and higher-skill work.

Watch the CyberGuy Live replay: Lock Down Your Phone in 30 Minutes

Your phone holds your email, passwords, photos, banking apps and personal data. In this free CyberGuy Live replay, Kurt the CyberGuy walks you step by step through simple phone security fixes you can do at your own pace. You’ll learn how to improve your privacy settings, spot the latest phone scams, use trusted security tools and walk away with a simple checklist to stay protected. Watch the replay and get our checklist here: CyberGuyLive.com 

Kurt’s key takeaways

ABB Robotics and PSYONIC are taking a different approach to one of robotics’ hardest problems: touch. Instead of training robots only in a lab, they want to use real movement and grip data from a bionic hand that people already use. That could help robots become better at delicate, variable tasks that have traditionally been hard to automate. It could also push industrial robots closer to working safely and effectively around humans in more settings. But the human side should not get lost in the excitement. If robots are going to learn from human touch, companies need to be clear about data use, workplace impact and safety testing.

The collaboration could help robots become more useful in factories, warehouses and other workplaces where precise grip matters. (ABB Robotics)

Advertisement

Would you feel comfortable knowing a robot at work was trained using real human touch data?  Let us know by writing to us at CyberGuy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report

  • Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
  • For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com trusted by millions who watch CyberGuy on TV daily.
  • Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.

Copyright 2026 CyberGuy.com. All rights reserved.  

Continue Reading

Technology

The best Apple deals you can get during Prime Day

Published

on

The best Apple deals you can get during Prime Day

Amazon’s Prime Day is now in its second day, and whether you’re looking for a new pair of wireless earbuds or a smartwatch, there’s a good chance you’ll find a discount. The Apple Watch Series 11 has already dropped to a new low price, while the AirPods Pro 3 are discounted to $179. With Tim Cook warning that price hikes are coming, now may be the moment if you’ve been eyeing one of the company’s devices.

Below are the best Apple deals currently available. Some are exclusive to Prime Day, while others are simply great discounts we think are worth highlighting. We’ll continue updating this guide throughout Prime Day, highlighting more deals as they become available.

Earbud and headphone deals

Update, June 24th: Adjusted prices and availability, and added deals for Apple’s MagSafe Charger as well as the Apple Magic Keyboard.

Continue Reading

Technology

A new paper argues Microsoft exaggerated its quantum claims a year ago

Published

on

A new paper argues Microsoft exaggerated its quantum claims a year ago

A critique published in Nature Wednesday calls the basic technology behind Microsoft’s “breakthrough” quantum computing chip the Majorana 1 into question. Microsoft unveiled the chip in February 2025 and said it featured a brand-new technology known as a topological qubit. Topological qubits, they said, would be the “building blocks” for their future quantum computer. Microsoft announced the next generation chip Majorana 2 at Build earlier this month.

But in a peer-reviewed article, Henry Legg, a physicist at the University of St Andrews, reanalyzed Microsoft’s data on their device and argued that the company’s researchers did not conclusively demonstrate a working topological qubit in the first place.

Theory predicts that the electrons in this wire behave in a collective pattern known as a Majorana particle, for which the chip is named.

Proponents of quantum computing predict that the technology’s computational abilities will advance new medicine discovery, encryption, and machine learning. Companies like Google and IBM have already demonstrated more advanced machines than Majorana 1 or 2, although presently, no one has conclusively gotten any quantum computer to perform anything useful. But Microsoft claimed that Majorana 1, and subsequently Majorana 2, paved their path toward a practical quantum computer.

Microsoft’s design, unique among quantum computing companies, involves a tiny wire, thinner than a human hair, made of the semiconductor indium arsenide stuck to a superconductor. Theory predicts that the electrons in this wire behave in a collective pattern known as a Majorana particle, for which the chip is named. Microsoft wants to encode information in the properties of the Majorana particle. (A topological qubit is to a Majorana particle as a transistor is to silicon.)

Advertisement

Proponents of the Majorana particle think it is promising qubit material because theory predicts that when formed into topological qubits, the Majorana should compute with fewer errors than competing materials, such as superconducting circuits pursued by IBM. This suggests that ultimately, fewer topological qubits are needed to scale up to a useful quantum computer.

That is, if Microsoft has actually made a Majorana particle. “They haven’t convincingly shown that they have Majoranas,” Legg told The Verge. “You can’t make a qubit if you don’t have the Majoranas.”

In Legg’s critique, he writes that what Microsoft claims as a signature of the Majorana particle could actually be from the formation of quantum dots, which are electron-containing structures, in the device. Quantum dots would not be useful for building the quantum computer. He also writes that Microsoft cherry-picked their data.

“You can’t make a qubit if you don’t have the Majoranas.”

Microsoft’s team published a rebuttal in Nature disputing Legg’s interpretation of their data. Legg’s critique “does not constitute a substantial scientific challenge to our findings,” the Microsoft team wrote. Legg has not “proposed an alternative model that fits all of our data,” Chetan Nayak, a physicist leading Microsoft’s quantum team, told The Verge.

Advertisement

Legg first posted his critique on the online physics repository arXiv on February 26, 2025, within a week of Microsoft’s Majorana 1 announcement. It took a year for Nature to conduct a peer review and publish his article.

Meanwhile, on June 2, Microsoft announced a new chip, the Majorana 2, featuring what they claimed was the next generation of their topological qubits. The company says they can build a “scalable quantum computer” by 2029. “We 100% stand behind our results,” Nayak told The Verge. “We stand by our roadmap. We stand behind our long-standing commitment to scientific rigor and dialogue.”

Legg says the company’s characterization of Majorana 2, which Microsoft wrote in a non-peer reviewed manuscript, suffers from similar problems he pointed out a year ago. “Nothing in this [manuscript] resolves the fundamental issues that so many scientists have with this company’s previous claims,” Legg told The Verge.

Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.

Continue Reading
Advertisement

Trending