New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commands

Cybersecurity researchers at Elastic Security Labs have identified a new modular malware called TELEPUZ spreading via ClickFix lures since late April 2026. The malware is described as full-featured, lightweight, and modular by researcher Cyril François. While the number of command-and-control domains is currently small, the campaign remains active and poses a data theft and remote command execution threat.