The Sorvepotel Virus Is Attacking WhatsApp Users in Brazil and Stealing Passwords. Know How It Works and What to Do to Protect Yourself.
New Virus on WhatsApp Worries Brazilians and Raises Alarm About Cybersecurity
A new virus named Sorvepotel is putting the cybersecurity of thousands of Brazilians at risk. The scam, recently identified by researchers from Trend Micro, mainly affects WhatsApp Web and has already made victims in various regions of the country.
The attack occurs when users download malicious ZIP files sent through messages on WhatsApp or fake emails.
As soon as the file is opened, the criminal takes control of the computer, steals banking passwords, and spreads the same virus to all of the victim’s contacts.
-
The mysterious giant blue sphere in the middle of the Amazon that went viral on the internet is the Planetarium of Médio Solimões, an impressive project that is revolutionizing access to astronomy in Brazil.
-
Earth is “pulling” water from the oceans into the core at nearly 3,000 km deep, and scientists finally explain how this slow and invisible process may be completely transforming the planet from the inside over billions of years.
-
Japan shocks the world by announcing a billion-dollar plan to build a chip factory on the Moon with the support of Toyota, Sony, and the government, aiming for 2-nanometer technology and global dominance.
-
Scientists in the U.S. transform plastic waste into gasoline and diesel with nearly 60% efficiency using molten salts and less than 200 °C, in a process that could cost less and challenge traditional methods that reach 500 °C.
Experts warn: the problem is not a flaw in the application, but rather in users’ behavior when interacting with suspicious files.
Out of the 477 recorded infections, 457 occurred in Brazil, which demonstrates the strength and targeting of the attack on the national public.
How the Sorvepotel Virus Works and Why WhatsApp Became a Target
The Sorvepotel virus received this peculiar name due to the servers used by criminals, which remind one of the phrase “ice cream in a jar.”
But the attack is far from sweet. The malware opens a “door” in the operating system and allows the invader to send external commands constantly, without the user realizing.
Among the main risks pointed out by researchers are:
- Theft of banking credentials on fake bank and cryptocurrency brokerage sites.
- Turning the computer into a “zombie”, controlled remotely by the invaders.
- Ban on the WhatsApp account if the system detects mass sending of messages considered spam.
The focus of the attack is clear: Brazilian users. The virus checks language, location, and date format, ensuring that infections only occur on systems configured in Brazilian Portuguese.
In addition to targeting ordinary people, Sorvepotel also aims at public and private organizations — including sectors of government, technology, education, industry, and construction. This shows the high degree of sophistication of the scam and the potential for damage.
Simple Measures to Protect Yourself and Avoid the Scam
Data protection depends, above all, on attention and prevention.
The experts from Trend Micro and Febraban reinforce some essential practices to avoid becoming a victim of this type of digital virus:
- Disable automatic downloads on WhatsApp Web and the mobile app.
- Avoid opening links or ZIP files sent by unknown contacts — even if they seem legitimate.
- Confirm the authenticity of the message with the sender through another channel before downloading any file.
- Restrict downloads on corporate devices, especially in environments with sensitive data.
- Conduct digital security training in companies to raise awareness among teams about threats.
These simple measures can prevent the virus from taking hold and compromising the technology and privacy of the user.
What WhatsApp and the Banking Sector Say About the Attack
In an official statement, WhatsApp reinforced its commitment to user safety:
“Only click on links or open files from people you know and trust. We are always working to make WhatsApp safer by creating layers of protection for our users.”
Meanwhile, the Brazilian Federation of Banks (Febraban) highlighted the ongoing investment in data protection and technology to combat fraud:
“The Brazilian banking system continuously invests in technology and security to prevent fraud. This year, nearly R$ 48 billion will be applied in protection measures, including constant monitoring and the use of artificial intelligence.”
Cybersecurity: Attention Is the Best Defense
In an increasingly digital scenario, WhatsApp has become one of the main entry points for virtual scams.
The case of the Sorvepotel virus shows that cybersecurity does not depend solely on companies, but also on individual awareness.
Therefore, be suspicious of messages with attachments or unusual promises, keep antivirus software updated, and adopt safe digital habits.
Prevention remains the best tool against attacks that threaten data protection and online privacy.

-
Uma pessoa reagiu a isso.