Elastic Security LabsPublished
Credential harvesting that survives takedowns: REVSTEALER
By Daniel Stepanic
Excerpt
Elastic Security Labs is tracking an emerging infostealer, REVSTEALER, under REF2859. This family has gained momentum in recent months, with higher distribution volume, and has emerged as a formidable threat, featuring a comprehensive credential harvester, an embedded sandbox scoring system, and a Polygon blockchain-based dead drop for resilience. Beyond credential theft, REVSTEALER targets gaming platforms for additional monetization; the developer clearly understands that victim accounts on these platforms hold real monetary value in resale markets.
G…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by Elastic Security Labs on elastic.co.
Mentioned in the excerpt
More from Elastic Security Labs7
- Auditing the auditor: Unmasking Apex AcceleratorElastic Security Labs · Published 12 Oct
- Phantom in the vault: Obsidian abused to deliver PhantomPulse RATElastic Security Labs · Published 14 Apr
- Shedding light on the ABYSSWORKER driverElastic Security Labs · Published 20 Mar 2025
- TELEPUZ: a modular MaaS malware spreading via CLICKFIX-VIDAR chainsElastic Security Labs · Published 16 Jul
On the same topics
- MoqHao Part 1: Identifying Phishing InfrastructureTeam Cymru · Published 10 Jan 2021
- LARVA-208PRODAFT · Added 18 Oct
- Why Are You Texting Me? UNC3944 Leverages SMS Phishing Campaigns for SIM Swapping, Ransomware, Extortion, and NotorietyMandiant (Google) · Published 14 Sep 2023
- App-Specific Password phishing and how to prevent itpushsecurity.com · Published 26 Jun 2025
