Portuguese 
Spanish 
Imagine receiving a message from someone you know with the title “Updated Budget.” You open it without a second thought — after all, it seems professional, common in daily life. But within seconds, your computer is infected, your WhatsApp account is cloned, and your personal data begins to leak silently. This is the real scenario behind the budget scam, the Sorvepotel virus, pointed out as the most dangerous digital risk of 2025.
The scam has gained momentum in recent months and is spreading rapidly among ordinary users and businesses. The reason? It is disguised as routine, infiltrating through WhatsApp Web and propagating itself. Unlike scams that require clicking on suspicious links, this one operates automatically — once inside the computer, it uses the victim’s account to send the infected message to all contacts, creating a mass infection chain.
How the Virus Disguises Itself
The secret to this scam’s success lies in social engineering, the art of deception with an appearance of normalcy. The message comes short and direct, with phrases like:
-
15-Year-Old American Builds Ocean Generator with PVC Pipe and 3D-Printed Propeller for $12, Wins National Prize, Presents at White House, and Makes Forbes 30 Under 30 List
-
$12 Billion Invested in AI Data Centers in Semi-Desert Mexican State, But 17 of 18 Municipalities Now Face Water Shortages, Residents Receive Water Only 3 Days a Week
-
How Much Does Starlink Satellite Internet Cost for Cars, Trucks, and RVs? Prices for Antenna, Accessories, and Plans
-
Scientists Convert Food Waste into Aviation Fuel, Successfully Test 50% Blend with Conventional Kerosene to Cut Emissions and Promote Sustainable Flights
“Here’s the budget as agreed.”
“I’m sending the updated budget, check if everything is okay.”
“Requested budget – see the attachment.”
The attachment appears legitimate: a ZIP, PDF, or DOC file. But the content is, in fact, a disguised shortcut (.lnk) that, when executed, installs the Sorvepotel virus on the victim’s computer.
From there, the malware searches for sensitive data, login cookies, saved passwords, and active sessions of WhatsApp Web — and begins to act on its own.
In minutes, it sends automatic messages to all the victim’s contacts, repeating the same scam. WhatsApp becomes a vector for chain contamination, something we haven’t seen on social networks for a long time.
Why the Scam Is So Dangerous
The Sorvepotel combines three factors that make it especially devastating:
- Speed — spreads in seconds, without human intervention.
- Credibility — the message comes from a real contact and with “normal” content.
- Silence — the victim rarely notices the infection until someone alerts them.
This combination creates a scenario of digital panic. In just a few days, the virus had already affected public agencies, small businesses, and thousands of home users. It steals logins, accesses conversations, and can even compromise bank accounts.
Signs That You May Have Been Infected
- Your WhatsApp Web is sending messages without your knowledge.
- Strange files and programs appear on your computer.
- The browser becomes slower or displays improper automatic logins.
- Friends report receiving “budget” messages from you.
If this happens, disconnect WhatsApp Web immediately, run an updated antivirus, and change your passwords, especially the banking ones.
How to Protect Yourself from the Budget Scam
- Beware of any unsolicited files.
Even if it’s from a friend, confirm before opening. - Check the file extension.
Files.zip,.lnk, or.scrare clear signs of risk. - Keep your system and antivirus always updated.
The virus exploits old vulnerabilities in Windows and browsers. - Enable two-step verification on WhatsApp.
This prevents your account from being cloned even if the access code leaks. - Avoid saving passwords in the browser.
It’s the first target of Sorvepotel.
The Scam That Deceived Even Professionals
The most frightening part is that even IT technicians and experienced professionals have fallen for it. The disguise is convincing, and the virus’s automatic behavior reduces reaction time.
The recommendation from experts is simple: if you didn’t request a budget, don’t open it — no matter how convincing the message seems.
The budget scam is more than just a security alert. It serves as a reminder that, in 2025, the biggest digital risk may come disguised as normalcy — with a simple WhatsApp message.
