Organization
5 Interestana reports mention Elastic Security Labs, newest first. Each is summarised from the original reporting and links back to its publisher.
A sophisticated Brazilian banking malware operation, identified by Elastic Security Labs as REF9334 and employing a toolkit named KREMLIN, has been actively targeting users since at least May 2025. This threat actor utilizes deceptive tactics, impersonating over a dozen Brazilian…
Elastic Security Labs has identified four new malicious programs linked to REVSTEALER, a growing information-stealing malware targeting Windows systems. These programs are designed to persist on an infected machine even after the initial REVSTEALER component has been removed.
A new modular malware, dubbed TELEPUZ, has been identified spreading through websites infected with ClickFix lures since late April 2026. Elastic Security Labs researcher Cyril François described the malware as "full-featured, lightweight, and modular" in a technical report.
SCMBANKER malware is actively targeting customers of Mexican banks, fintech companies, payment processors, and cryptocurrency exchanges, according to Elastic Security Labs. The threat actor group, tracked as REF6045, employs a sophisticated social engineering tactic using "ClickFix" lures to infect victims.
Cybersecurity researchers have identified a new malware loader named OXLOADER, which is being used to distribute the CastleStealer information-stealing malware. Elastic Security Labs reported on March 14, 2024, that this campaign utilizes malicious Google Ads to initiate the distribution process.