September 7, 2026
- REVSTEALER is scaling: Elastic Security Labs tracks it as REF2859 with a broad credential harvester, an embedded sandbox scoring system, gaming-platform account theft for resale, and a Polygon blockchain dead drop for C2 resilience. Four linked modules disable Windows Update and Defender to run a crypto miner (The Hacker News). · Threat Intelligence
in The Diff Is the Disclosure: MikroTik's Silent Patch Comes Apart