
A single zipped shortcut arriving in a WhatsApp chat can quietly trigger a full‑blown heist-grade intrusion chain that looks routine to defenders until the browsers of a Brazilian victim start betraying their bank sessions. That is the unsettling scenario emerging from an investigation into the Maverick banking trojan, whose delivery and inner mechanics align strikingly with the older Coyote campaign.










