Brazilian trojan hijacks WhatsApp to spread crypto phishing
May 9, 2026
< 1 min read
by Randa Moses
for CryptoPolitan

Share:
AI Overview
TCLBANKER, a Brazilian banking trojan, hijacks WhatsApp and Outlook accounts to spread crypto phishing links to victims' contacts, amplifying social-engineering attacks. Elevated security risk for crypto users, wallets and platforms (DeFi, DEX, CEX); phishing can target fundraising and token-launch participants, underscoring need for stronger security and user awareness.
Bearish
Security researchers found TCLBANKER, a Brazilian banking trojan that hijacks WhatsApp and Outlook accounts to spread crypto phishing to victims' contacts.