#REVSTEALER

hackread.com

Fake Claude Opus 5 App Spreads New RevStealer Windows Malware

Morphisec uncovers RevStealer, a Windows infostealer spread through a fake Claude app that steals credentials, cryptocurrency wallets and other sensitive data.

cyberveille.ch

REVSTEALER : analyse d'un infostealer émergent avec dead drop Polygon et modules C2

Cet article présente une analyse technique détaillée de REVSTEALER, un infostealer émergent suivi sous la référence interne REF2859. Gen Threat Labs avait déjà couvert ce malware plus tôt dans l'été 2026.

meterpreter.org

The Hidden Perils of REVSTEALER Infections

Eradicating a data stealer from a computer does not mean the system is safe. The cybersecurity firm Elastic has outlined four previously unknown components linked to the REVSTEALER credential harvesting infostealer. Unlike the primary malware, which deletes itself after stealing information, these extra programs deeply entrench themselves in Windows. Therefore, they sustain their malicious operations indefinitely. Credential Harvesting and Browser Evasion…

www.hendryadrian.com

Four REVSTEALER-Linked Modules Disable Windows Update And Defender To Run A Crypto Miner

Elastic Security Labs documented REVSTEALER and four previously unreported companion programs—ProManager, WinUpdate, SoftManager, and LockAppHost—that can remain on infected Windows systems after the main stealer deletes itself. The activity set steals credentials, hijacks crypto transactions, turns victims into a reverse proxy, and can disable Windows Update and Microsoft Defender before dropping...