Dossier
TCLBANKER
Coverage of TCLBANKER in the Nexus archive.
- TCLBANKER Banking Trojan Targets Financial Platforms via WhatsApp and Outlook Worms
A previously undocumented Brazilian banking trojan called TCLBANKER has been flagged, targeting 59 financial platforms via WhatsApp and Outlook worms. The malware is an update of the Maverick family and is being tracked by Elastic Security Labs under REF3076. It spreads using a worm called SORVEPOTEL.
- New TCLBanker malware self-spreads over WhatsApp and Outlook
A new trojan named TCLBanker targets 59 banking, fintech, and cryptocurrency platforms. It uses a trojanized MSI installer for Logitech AI Prompt Builder to infect systems. The malware self-spreads over WhatsApp and Outlook.