RevStealer steals browser and wallet credentials via 14 indirect syscalls
Elastic tracks the cluster as REF2859; about 4,700 VirusTotal samples date back to February 2026.
Stories per day · 30 days
1 stories, newest first · one card per story
Stories tagged #indirect-syscalls