← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
TCLBANKER: Brazilian Banking Trojan Spreading via WhatsApp and Outlook
WHITE REF3076 Tr1sa111 2026-05-11 Modified: 2026-05-11
15
IOCs
MEDIUM VOLUME
whatsapp wormtclbankermavericksorvepotel
MITRE ATT&CK & Malware Families
MALWARE FAMILIES
TCLBANKER MAVERICK SORVEPOTEL
Indicators of Compromise (2 / 15 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain hostname
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA1 91fafaa1240676afe5c55d931261e3798797c408 — 2026-05-11
FileHash-SHA1 94f21c140afd18b43d5a0f274216545442b3f6cd — 2026-05-11
References (1)
↗ https://www.elastic.co/security-labs/tclbanker-brazilian-banking-trojan