A Wretch Client: From ClickFix deception to information stealer deployment

Author(s): Salim Bitam
Organization: Elastic

Open article directly Open article on Archive.org

2026-09-01 ⋅ Elastic ⋅ Daniel Stepanic, Jia Yu Chan, Salim Bitam
REVSTEALER ramps up: analysis of up-and-coming infostealer
RevStealer

2026-07-17 ⋅ Elastic ⋅ Daniel Stepanic
New North Korean campaign uses fake coding interviews to steal developer credentials
OtterCookie

2026-07-16 ⋅ Elastic ⋅ Cyril François
TELEPUZ: a modular MaaS malware spreading via CLICKFIX-VIDAR chains
TELEPUZ

Propose Change A Wretch Client: From ClickFix deception to information stealer deployment