New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commands

Cybersecurity researchers have called attention to a new modular malware called TELEPUZ that's been spreading via websites infected with ClickFix lures since late April 2026. "The malware is full-featured, lightweight, and modular," Elastic Security Labs researcher Cyril François said in a technical report. "While the number of C2 [command-and-control] domains is currently small, the daily

Facts from reporting: TELEPUZ is a modular malware-as-a-service (MaaS) family for Windows that spreads via ClickFix social-engineering lures, using pasted PowerShell commands to pull VIDAR-linked second-stage payloads, establish WebSocket C2, evade defenses, and steal credentials, cookies, and other data.[1][3][4][12] It is rapidly evolving with a small but active C2 footprint, sandbox/VM detection, and broad post-compromise capabilities including keylogging, web injection, and privilege escalation.[1][3][4] RealGround analysis: While TELEPUZ targets endpoints rather than AI systems directly, its data theft and credential harvesting increase the risk of unauthorized access to AI agents, model management consoles, and MLOps infrastructure, enabling downstream misuse of AI capabilities and exfiltration of AI-related data. Organizations should treat ClickFix-style social engineering and MaaS ecosystems as critical inputs to AI security threat models, harden browser and endpoint paths used by staff who operate or administer AI systems, and continuously red-team workflows where copied commands or scripts could be abused to compromise AI tooling.