← Back to Feed

Unraveling Water Saci's New Multi-Format, AI-Enhanced Attacks Propagated via WhatsApp

December 2, 2025 · Trend Micro · Severity: HIGH

Through AI-driven code conversion and a layered infection chain involving different file formats and scripting languages, the threat actors behind Water Saci are quickly upgrading their malware delivery and propagation methods across WhatsApp in Brazil.

Key Takeaways

  • Water Saci uses AI-driven code conversion and a layered infection chain across different file formats.
  • The threat actors are quickly upgrading their malware delivery methods across WhatsApp in Brazil.
  • AI-enhanced Water Saci attacks propagate through WhatsApp with multi-format scripting languages.
☕ Buy a Coffee