4h ago
TCLBANKER trojan hijacks WhatsApp Web and Outlook to push crypto phishing in Brazil
Elastic Security Labs identified TCLBANKER, a Brazilian banking trojan that monitors 59 bank, fintech, and crypto domains and triggers remote control when targets are visited. The malware spreads by taking over victims’ WhatsApp Web sessions and Outlook accounts to message their contacts with phishing lures and the trojanized installer.