← Back to feed
research Elastic Security Labs

TCLBANKER: Brazilian Banking Trojan Spreading via WhatsApp and Outlook

Elastic Security Labs Microsoft

REF3076 uses a trojanized Logitech installer to deploy TCLBANKER, a Brazilian banking trojan with environment-gated payloads, WPF fraud overlays, and self-pr...

Read the full story Elastic Security Labs →

Related Coverage

research TCLBANKER: Brazilian Banking Trojan Spreading via WhatsApp and Outlook Elastic Security Labs · May 7