The Sorvepotel Virus Is Attacking WhatsApp Users in Brazil and Stealing Passwords. Know How It Works and What to Do to Protect Yourself.
New Virus on WhatsApp Worries Brazilians and Raises Alarm About Cybersecurity
A new virus named Sorvepotel is putting the cybersecurity of thousands of Brazilians at risk. The scam, recently identified by researchers from Trend Micro, mainly affects WhatsApp Web and has already made victims in various regions of the country.
The attack occurs when users download malicious ZIP files sent through messages on WhatsApp or fake emails.
As soon as the file is opened, the criminal takes control of the computer, steals banking passwords, and spreads the same virus to all of the victim’s contacts.
-
The “Chinese invasion” has arrived: BYD already dominates almost 45% of the electric buses registered in Brazil in May 2026, while 80% of the entire electric fleet in the country is concentrated in São Paulo with 1,300 vehicles.
-
From toy to track machine: Koenigsegg Sadair’s Spear made with over 327,000 Lego pieces reaches 111 km/h and surpasses the former Bugatti Chiron record.
-
Deep-sea marine animal can go more than 5 years without eating, combining physical adaptations and genetic mechanisms to survive in environments with extreme food scarcity; meet the Bathynomus.
-
Science wants to know what football does to you: study gathers smartwatch data to understand the real impact of World Cup emotions on the human body
Experts warn: the problem is not a flaw in the application, but rather in users’ behavior when interacting with suspicious files.
Out of the 477 recorded infections, 457 occurred in Brazil, which demonstrates the strength and targeting of the attack on the national public.
How the Sorvepotel Virus Works and Why WhatsApp Became a Target
The Sorvepotel virus received this peculiar name due to the servers used by criminals, which remind one of the phrase “ice cream in a jar.”
But the attack is far from sweet. The malware opens a “door” in the operating system and allows the invader to send external commands constantly, without the user realizing.
Among the main risks pointed out by researchers are:
- Theft of banking credentials on fake bank and cryptocurrency brokerage sites.
- Turning the computer into a “zombie”, controlled remotely by the invaders.
- Ban on the WhatsApp account if the system detects mass sending of messages considered spam.
The focus of the attack is clear: Brazilian users. The virus checks language, location, and date format, ensuring that infections only occur on systems configured in Brazilian Portuguese.
In addition to targeting ordinary people, Sorvepotel also aims at public and private organizations — including sectors of government, technology, education, industry, and construction. This shows the high degree of sophistication of the scam and the potential for damage.
Simple Measures to Protect Yourself and Avoid the Scam
Data protection depends, above all, on attention and prevention.
The experts from Trend Micro and Febraban reinforce some essential practices to avoid becoming a victim of this type of digital virus:
- Disable automatic downloads on WhatsApp Web and the mobile app.
- Avoid opening links or ZIP files sent by unknown contacts — even if they seem legitimate.
- Confirm the authenticity of the message with the sender through another channel before downloading any file.
- Restrict downloads on corporate devices, especially in environments with sensitive data.
- Conduct digital security training in companies to raise awareness among teams about threats.
These simple measures can prevent the virus from taking hold and compromising the technology and privacy of the user.
What WhatsApp and the Banking Sector Say About the Attack
In an official statement, WhatsApp reinforced its commitment to user safety:
“Only click on links or open files from people you know and trust. We are always working to make WhatsApp safer by creating layers of protection for our users.”
Meanwhile, the Brazilian Federation of Banks (Febraban) highlighted the ongoing investment in data protection and technology to combat fraud:
“The Brazilian banking system continuously invests in technology and security to prevent fraud. This year, nearly R$ 48 billion will be applied in protection measures, including constant monitoring and the use of artificial intelligence.”
Cybersecurity: Attention Is the Best Defense
In an increasingly digital scenario, WhatsApp has become one of the main entry points for virtual scams.
The case of the Sorvepotel virus shows that cybersecurity does not depend solely on companies, but also on individual awareness.
Therefore, be suspicious of messages with attachments or unusual promises, keep antivirus software updated, and adopt safe digital habits.
Prevention remains the best tool against attacks that threaten data protection and online privacy.

-
1 person reacted to this.