RevStealer

Mentions · 7d0
Mentions · 30d0
All mentions5
First seenSep 1, 2026
Last mentionedSep 7, 2026

Timeline

5 articles · newest first

⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More

Weekly recap: actively exploited Chrome V8 zero-day, MikroTik RouterOS zero-day chain, Magento StyleSmuggler backdoor, and critical N-able N-central flaws.

The Hacker NewsSep 7, 14:36 UTC · Sep 7, 2026Exploit / PoCExploitedCVE-2026-85046 CVE-2026-86206 CVE-2026-86207+73

Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner

Elastic documents four persistent REVSTEALER-linked tools (ProManager, WinUpdate, SoftManager, LockAppHost); LockAppHost disables Windows Update and Defender to run a crypto miner.

The Hacker NewsSep 6, 08:34 UTC · Sep 6, 2026MalwareExploited1 · 1 read

Week in review: Claude accounts compromised through infostealer, Patch Tuesday forecast

Help Net Security week-in-review roundup: Claude infostealer lockouts, record Patch Tuesday, McKesson breach, SonicWall zero-days, PaperCut attacks.

Help Net SecuritySep 6, 00:00 UTC · Sep 6, 2026OtherExploitedCVE-2026-62911 CVE-2026-83548 CVE-2026-83549+13

REVSTEALER ramps up: analysis of up-and-coming infostealer

Elastic Security Labs analyzes REVSTEALER, an emerging infostealer harvesting browser credentials, cryptocurrency wallets, and gaming accounts.

Elastic Security LabsSep 2, 00:00 UTC · Sep 2, 2026MalwareExploited2 · 1 read

Fake Claude Opus 5 app delivers malware and wipes its own tracks

A fake 'Claude Opus 5' GitHub repository impersonating Anthropic distributes RevStealer, a Windows infostealer stealing passwords, crypto wallets and VPN credentials.

Help Net SecuritySep 1, 00:00 UTC · Sep 1, 2026Malware5 · 1 read

Related CVEs

by mentions

CVE-2026-835488%10.0
Pre-Authentication SSRF in SonicWall SMA1000 Appliance Workplace Interface
published Sep 1, 2026SonicWall SMA1000 appliance Workplace interfaceKEVPoC ×3
CVE-2026-958619%9.3
Unauthenticated SQL Injection RCE in Sangoma Switchvox SMB Edition
published Jul 17, 2026Sangoma Switchvox SMB EditionKEVPoC
CVE-2026-860606%9.2
Argument-Injection Flaw in MikroTik RouterOS SSH Login Enables Privilege Escalation
published Sep 5, 2026MikroTik RouterOS v6 (Long-term channel)KEVPoC ×3
CVE-2026-672772%8.8
Unauthenticated Kernel Crash and Memory Leak in MikroTik RouterOS btest
published Sep 5, 2026MikroTik RouterOS (Long-term channel, v6)KEVPoC
CVE-2026-8354910%7.8
Authenticated OS Command Injection RCE in SonicWall SMA1000 Appliance Console
published Sep 1, 2026SonicWall SMA1000 series appliances - Appliance Management Console (AMC)KEV
CVE-2026-672792%6.9
Unauthenticated SSH Session Bypass Enables File Writes in MikroTik RouterOS
published Sep 5, 2026MikroTik RouterOS (Long-term branch, v6)KEVPoC ×4
CVE-2026-67281<1%8.7
Unauthenticated Arbitrary File Read in MikroTik RouterOS WebFig (CVE-2026-67281)
published Sep 5, 2026MikroTik RouterOS (WebFig /jsproxy)PoC
CVE-2026-62911<1%8.0
Capture-Replay Authentication Bypass in Microsoft Exchange Server
published Aug 11, 2026microsoft exchange serverPoC
CVE-2026-86207<1%7.7
Authentication bypass in N-able N-central internal APIs before 2026.3 HF 3
published Sep 5, 2026N-able N-central
CVE-2026-67278<1%6.3
X.509 Signature Forgery Enables TLS Impersonation in MikroTik RouterOS 7.x
published Sep 5, 2026MikroTik RouterOSPoC

Appears with

Claude Opus 5ai model · 3
Morphisecvendor · 3
Anthropicvendor · 3
Elasticvendor · 3
Googlevendor · 2
Anthropicorganization · 2
Elastic Security Labsorganization · 2
Morphisecorganization · 2
Claudeproduct · 2
Palo Alto Networksvendor · 1
CISAorganization · 1
SonicWallvendor · 1
WinUpdatemalware · 1
ProManagermalware · 1
Claude Opus 5product · 1
Microsoft Teamsproduct · 1

Entities are extracted by the model from each article. First seen Sep 1, 2026, last mentioned Sep 7, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.