The Water Saci campaign in Brazil uses layered, multi-format malware delivered via socially engineered WhatsApp messages, with AI-assisted scripting, to propagate a banking trojan that targets Brazilian banking and cryptocurrency users while evading traditional endpoint defenses.