As cited
Copy frozen at (site build).
threat intel
REVSTEALER ramps up: analysis of up-and-coming infostealer
Elastic Security Labs is tracking REVSTEALER, an emerging infostealer with approximately 4,700 samples on VirusTotal over the past year that employs sophisticated anti-analysis features including a custom sandbox scoring system and Polygon blockchain-based dead drops for command and control resilience. The malware harvests credentials from browsers, gaming platforms, cryptocurrency wallets, and other applications, with particular focus on monetizing gaming account takeovers through resale markets. Distribution occurs primarily through YouTube account hijackings promoting fake gaming cheats and cheat menus across multiple lure themes.
Why it matters: Organizations and gamers are targeted by REVSTEALER through social engineering campaigns that impersonate legitimate software; security teams should monitor for malicious game-cheat downloads and suspicious YouTube channel activity promoting free cheats, while endpoint defenders need detection rules for the malware's characteristic VMProtect packing and Polygon blockchain communication patterns.
- Source published
- First seen by Cybersecurity Tracker