New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commands
Since late April 2026, a new modular malware known as TELEPUZ has been propagating through websites infected with ClickFix lures, according to cybersecurity analysts.
According to a technical analysis by Cyril François, a researcher at Elastic Security Labs, the virus is modular, lightweight, and rich of features. Even if there aren't many C2 [command-and-control] domains at the moment, the volume of builds that are published to VirusTotal every day and the speed at which updates are released show that they are actively being developed and will probably continue to expand.
The revelation makes it the second new threat cluster, after SCMBANKER, to spread through ClickFix, a widespread social engineering attack that poses as harmless fixes for fictitious software updates, browser erro...