← Back to Feed
Unraveling Water Saci's New Multi-Format, AI-Enhanced Attacks Propagated via WhatsApp
December 2, 2025 · Trend Micro · Severity: HIGH
Through AI-driven code conversion and a layered infection chain involving different file formats and scripting languages, the threat actors behind Water Saci are quickly upgrading their malware delivery and propagation methods across WhatsApp in Brazil.
Key Takeaways
- Water Saci threat actors use AI-driven code conversion and a layered infection chain involving multiple file formats and scripting languages.
- The group is quickly upgrading its malware delivery and propagation methods across WhatsApp in Brazil.
- WhatsApp users in Brazil should avoid opening unexpected files, as Water Saci campaigns spread through messaging platforms.