Dossier
REF3076
Coverage of REF3076 in the Nexus archive.
- TCLBANKER Banking Trojan Targets Financial Platforms via WhatsApp and Outlook Worms
A previously undocumented Brazilian banking trojan called TCLBANKER has been flagged, targeting 59 financial platforms via WhatsApp and Outlook worms. The malware is an update of the Maverick family and is being tracked by Elastic Security Labs under REF3076. It spreads using a worm called SORVEPOTEL.