TCLBANKER Banking Trojan Targets Financial Platforms via WhatsApp and Outlook Worms
Published: (May 8, 2026 at 02:12 PM EDT)
1 min read
Source: The Hacker News
Source: The Hacker News
Overview
Threat hunters have flagged a previously undocumented Brazilian banking trojan dubbed TCLBANKER. It is capable of targeting 59 banking, fintech, and cryptocurrency platforms.
Tracking and Designation
The activity is being tracked by Elastic Security Labs under the moniker REF3076.
Relationship to Existing Malware
The malware family is assessed to be a major update of the Maverick, which is known to leverage a worm called SORVEPOTEL to spread via.