Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

REVSTEALER game-cheat lure campaign on hijacked YouTube channels

Campaign
First reported
Last updated
Happening score
H score 25
1 unique sources, 1 articles

Summary

Hide ▲

The REVSTEALER distribution campaign is still reaching new victims through game-cheat lures, widening exposure across at least 17 hijacked YouTube channels and two cheat websites. The promotion uses short AI-generated videos and hijacked accounts to funnel users toward the lure sites. That traffic feeds a Windows stealer ecosystem that can harvest passwords, cookies, wallets, and session data. The result is a broader credential-theft and account-takeover risk for people searching for cheats.

Related Happenings

REVSTEALER post-self-delete modules for wallet theft and mining

Malware Activity
H score22 First: 06.09.2026 11:34 Last: 06.09.2026 11:34 Sources 1

How related: Elastic Security Labs has documented four previously unreported programs associated with REVSTEALER, an emerging Windows information stealer, that remain on an infected machine after the stealer deletes itself.

About this happening: REVSTEALER now has four linked Windows modules that persist after self-deletion and keep stealing wallets, hijacking clipboard content, proxying traffic, and mining crypto...

Open Happening

GPPStorm Google Partners enrollment phishing campaign

Campaign
H score33 First: 13.07.2026 16:03 Last: 13.07.2026 16:03 Sources 1

About this happening: GPPStorm is a phishing campaign that uses bogus Google Partners and Google Premier Partner enrollment workflows to push recipients to a fake Google sign-in page and st...

Open Happening

Lurking Lizard trojanized 7-Zip installer campaign

Campaign
H score84 First: 09.07.2026 07:01 Last: 09.07.2026 07:01 Sources 1

About this happening: A Lurking Lizard campaign used a trojanized 7-Zip installer to recruit devices as proxy nodes, expanding a residential-proxy operation that has run since at least Au...

Open Happening

Ghost Networks crypto-clipper promotion campaign

Campaign
H score15 First: 17.06.2026 21:14 Last: 17.06.2026 21:14 Sources 1

About this happening: Unknown threat actor is running an active June 2026 campaign that fakes legitimacy to distribute a Rust-based clipboard hijacker. The operation uses bogus GitHub sta...

Open Happening

TikTok and Instagram Reels Vidar social-engineering campaign

Campaign
H score37 First: 10.06.2026 19:00 Last: 10.06.2026 19:00 Sources 1

About this happening: A TikTok and Instagram Reels campaign is using fake free-software tutorials to push Vidar, turning social feeds into a high-reach malware delivery channel. The operati...

Open Happening

Timeline

  1. 02.09.2026 03:00 2 articles · 4d ago

    REVSTEALER spreads through game-cheat lures on hijacked YouTube channels

    Initial Disclosure

    Elastic Security Labs said REVSTEALER reaches victims mainly through game-cheat lures, with at least 17 YouTube channels—many hijacked from their original owners—promoting two cheat websites through short AI-generated videos. The findings and technical white paper were published on September 2, framing the campaign as an active distribution operation that funnels users toward the stealer ecosystem.

    Show sources
    Open in new tab