CypherRat: how is the WhatsApp virus that can leave your bank account at zero

Cybersecurity experts are warning about a new computer virus called CypherRat that is capable of stealing personal information stored on its victims' phones and subsequently emptying bank accounts.

According to experts CypherRat is an advanced malware that specializes in collecting sensitive information and stealing data from infected devices. This virus is mainly spread through WhatsApp and phishing emails, which contain malicious links or attachments. Once a user clicks on a link or opens an infected attachment, the virus is downloaded to their device and begins collecting sensitive information such as passwords, credit card numbers, and bank details.

The CypherRat also has the ability to remotely take control of an infected device, allowing cybercriminals to perform malicious actions on the device, such as stealing additional data or installing additional malware.

One of the distinctive features of CypherRat is that it uses an encryption technique to hide its presence on the infected system. The malware uses a combination of symmetric and asymmetric encryption techniques to encrypt stolen files and prevent detection by security systems. This makes it difficult for security analysts to detect and remove malware.

Once installed on a system, CypherRat communicates with its control servers to receive instructions and send stolen information. Attackers can use the remote access gained to steal sensitive information such as passwords, credit card numbers, and other financial information. They can also use the access to install other malware on the system and spread the attack to other devices on the network.

Experts point out that the best way to avoid falling victim to this kind of attack is to avoid clicking on links that may seem suspicious. This methodology applies both to chats with close people and to unknown numbers.