New TELEPUZ Malware Spreads via ClickFix

Cybersecurity researchers have identified a new modular malware named TELEPUZ, which has been spreading through websites infected with ClickFix since late April 2026. This malware is designed to steal data and execute commands, making it a serious threat to cybersecurity. According to a technical report by Cyril François from Elastic Security Labs, TELEPUZ is "fully equipped, lightweight, and modular." The malware employs a variety of techniques to spread, with ClickFix serving as the primary distribution method. ClickFix is a well-known tool frequently used by cybercriminals to lure users to malicious websites.

Researchers have noted that the number of C2 (Command-and-Control) domains associated with TELEPUZ is currently low, but this does not mean that the threat is any less serious. TELEPUZ is modular, meaning it contains various components that can be activated as needed. This modularity allows attackers to tailor the malware to different targets and optimize their attacks. Researchers have already identified several modules designed for specific tasks such as data theft or executing commands. Another concerning feature of TELEPUZ is its ability to self-update.

This function enables the malware to adapt to new security measures and enhance its efficiency. Security analysts warn that this capability makes it easier for attackers to maintain their activities over the long term without being detected. The spread of TELEPUZ has already led to a number of security incidents. Companies and organizations affected by the malware report data losses and disruptions to their IT systems. Researchers recommend that companies review their security protocols and ensure that all systems are up to date to protect against this threat.

The security community has responded to the threat posed by TELEPUZ by sharing information about the malware and its distribution. Various security companies are collaborating to analyze the malware and develop countermeasures. The cooperation among companies could be crucial in containing the spread of TELEPUZ and minimizing the impact on affected systems. Researchers have also pointed out that the malware may become more widespread in the future as the number of affected domains increases. The cybercriminals behind TELEPUZ may attempt to expand their infrastructure to reach more users.

Security analysts advise remaining vigilant and conducting regular security audits. The discovery of TELEPUZ is further evidence of the ever-evolving landscape of cyber threats. Attackers are increasingly using complex techniques to achieve their goals, underscoring the need for companies to adopt proactive security measures. Researchers emphasize that implementing layered security strategies is essential to protect against such threats. The TELEPUZ malware exemplifies the challenges faced by the cybersecurity industry.

The constant adaptation and improvement of malware require an equally dynamic response from security providers and companies. Researchers from Elastic Security Labs have already taken steps to analyze the malware and assess its impact. The vulnerability exploited by TELEPUZ could potentially affect thousands of users accessing infected websites. The exact number of affected systems is currently unknown; however, it is estimated that the malware could continue to spread in the coming weeks. Security researchers recommend that all users regularly check their systems for suspicious activities. "The threat posed by TELEPUZ is real and requires immediate attention from companies and individuals," said Cyril François in his report. "We must remain vigilant and continuously adjust our security measures to counter such threats."