LockAppHost

Mentions · 7d0
Mentions · 30d0
All mentions1
First seenSep 6, 2026
Last mentionedSep 6, 2026

Timeline

1 articles · newest first

Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner

Elastic documents four persistent REVSTEALER-linked tools (ProManager, WinUpdate, SoftManager, LockAppHost); LockAppHost disables Windows Update and Defender to run a crypto miner.

The Hacker NewsSep 6, 08:34 UTC · Sep 6, 2026MalwareExploited1 · 1 read

Appears with

Anthropicorganization · 1
ProManagermalware · 1
Windows Updateproduct · 1
Morphisecorganization · 1
AuraStealermalware · 1
SoftManagermalware · 1
CMSTPproduct · 1
VoidStealermalware · 1
Anthropicvendor · 1
Elasticvendor · 1
Lumma Stealermalware · 1
Microsoft Defenderproduct · 1
Claudeproduct · 1
Elastic Security Labsorganization · 1
Claude Opus 5ai model · 1
ElevationKatzmalware · 1

Entities are extracted by the model from each article. First seen Sep 6, 2026, last mentioned Sep 6, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.