TELEPUZ Web Injector Can Steal Cookies, Execute JavaScript, and Replace IBAN Details

TELEPUZ is a modular malware family that utilizes ClickFix social engineering and advanced evasion techniques to compromise systems and establish resilient command-and-control communication. Through its WebInjector module, the threat actor can intercept browser sessions to steal cookies, execute malicious JavaScript, and perform financial fraud by replacing IBAN details.