Threats Tagged 'telepuz'

TELEPUZ is a modular malware-as-a-service first identified in April 2026 that spreads through CLICKFIX-VIDAR infection chains. It uses advanced evasion techniques such as indirect syscalls, NTDLL unhooking, and anti-VM checks. The malware establishes persistence by installing services and communicates with command-and-control servers via WebSockets. It downloads additional modules for keylogging, credential theft, and web injection. Initial infection relies on social engineering to trick victims into running PowerShell commands that deploy VIDAR, which then delivers TELEPUZ components. Despite limited command-and-control infrastructure, high daily build volumes suggest active development by a small team or individual. No known exploits in the wild or patches are indicated.