Portuguese 
English 
Spanish 
3 min of reading 
0 comments 
Imagine receiving a message from someone you know with the title “Updated Budget.” You open it without a second thought — after all, it seems professional, common in daily life. But within seconds, your computer is infected, your WhatsApp account is cloned, and your personal data begins to leak silently. This is the real scenario behind the budget scam, the Sorvepotel virus, pointed out as the most dangerous digital risk of 2025.
The scam has gained momentum in recent months and is spreading rapidly among ordinary users and businesses. The reason? It is disguised as routine, infiltrating through WhatsApp Web and propagating itself. Unlike scams that require clicking on suspicious links, this one operates automatically — once inside the computer, it uses the victim’s account to send the infected message to all contacts, creating a mass infection chain.
How the Virus Disguises Itself
The secret to this scam’s success lies in social engineering, the art of deception with an appearance of normalcy. The message comes short and direct, with phrases like:
-
Brazilian scientists use high-frequency ultrasound to burst Covid-19 and H1N1 viruses without damaging human cells and point to a path for new treatments against dengue and zika.
-
Scientists find a super-reservoir of 6,000 km³ of magma beneath Tuscany at depths of up to 15 km, paving the way to explore geothermal energy, lithium, and rare earth elements.
-
Red dots from the James Webb may reveal black holes that are relics from before the Big Bang, says a study proposing a “Great Bounce” and suggesting a connection with dark matter.
-
10-year-old girl falls in love with Minecraft, compares game stones with real minerals, and becomes the youngest Brazilian to publish a scientific article.
“Here’s the budget as agreed.”
“I’m sending the updated budget, check if everything is okay.”
“Requested budget – see the attachment.”
The attachment appears legitimate: a ZIP, PDF, or DOC file. But the content is, in fact, a disguised shortcut (.lnk) that, when executed, installs the Sorvepotel virus on the victim’s computer.
From there, the malware searches for sensitive data, login cookies, saved passwords, and active sessions of WhatsApp Web — and begins to act on its own.
In minutes, it sends automatic messages to all the victim’s contacts, repeating the same scam. WhatsApp becomes a vector for chain contamination, something we haven’t seen on social networks for a long time.
Why the Scam Is So Dangerous
The Sorvepotel combines three factors that make it especially devastating:
- Speed — spreads in seconds, without human intervention.
- Credibility — the message comes from a real contact and with “normal” content.
- Silence — the victim rarely notices the infection until someone alerts them.
This combination creates a scenario of digital panic. In just a few days, the virus had already affected public agencies, small businesses, and thousands of home users. It steals logins, accesses conversations, and can even compromise bank accounts.
Signs That You May Have Been Infected
- Your WhatsApp Web is sending messages without your knowledge.
- Strange files and programs appear on your computer.
- The browser becomes slower or displays improper automatic logins.
- Friends report receiving “budget” messages from you.
If this happens, disconnect WhatsApp Web immediately, run an updated antivirus, and change your passwords, especially the banking ones.
How to Protect Yourself from the Budget Scam
- Beware of any unsolicited files.
Even if it’s from a friend, confirm before opening. - Check the file extension.
Files.zip,.lnk, or.scrare clear signs of risk. - Keep your system and antivirus always updated.
The virus exploits old vulnerabilities in Windows and browsers. - Enable two-step verification on WhatsApp.
This prevents your account from being cloned even if the access code leaks. - Avoid saving passwords in the browser.
It’s the first target of Sorvepotel.
The Scam That Deceived Even Professionals
The most frightening part is that even IT technicians and experienced professionals have fallen for it. The disguise is convincing, and the virus’s automatic behavior reduces reaction time.
The recommendation from experts is simple: if you didn’t request a budget, don’t open it — no matter how convincing the message seems.
The budget scam is more than just a security alert. It serves as a reminder that, in 2025, the biggest digital risk may come disguised as normalcy — with a simple WhatsApp message.
-
Uma pessoa reagiu a isso.