Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner
The Hacker News · Sep 06, 2026
Elastic Security Labs has documented four previously unreported programs associated with REVSTEALER, an emerging Windows information stealer, that remain on an infected machine after the stealer deletes itself. One of them switches off Windows Update and Microsoft Defender before running a cryptocurrency miner. The company named the four programs ProManager, WinUpdate, SoftManager, and
Read original on The Hacker News
Want to stay informed about new business solutions?
Follow us
Ready to build a better digital experience?
We create modern multilingual websites, integrate external services and automate content workflows for growing businesses.