SecurityThe Hacker Newsabout 3 hours ago
REVSTEALER Modules Disable Defender, Run Miner
1 min read
Elastic Security Labs documented four REVSTEALER-linked modules: ProManager, WinUpdate, SoftManager, and LockAppHost. LockAppHost disables Windows Update and Microsoft Defender, then hides a crypto miner. REVSTEALER, sold since at least February 2026, steals browser passwords, cookies, and wallet data before deleting itself.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyMicrosoft
Summary by ByteBrief
