USB-Worm Backdoor and Keylogger Compromise Financial Institution

Elastic Security Labs found two custom Windows malware components on a South Asian financial institution. BRUSHWORM is a modular backdoor that spreads via USB, steals documents, and downloads additional payloads.

Part of the PlainSec briefing for 2026-03-27

Sources

Elastic Security Labs

USB-Worm Backdoor and Keylogger Compromise Financial InstitutionElastic Security Labs found two custom Windows malware components on a South Asian financial institution. BRUSHWORM is a modular backdoor that spreads via USB, steals documents, and downloads additional payloads.Part of the PlainSec briefing for 2026-03-27Sources

Elastic Security Labs