Security researchers have identified TCLBANKER, a new Brazilian banking trojan tracked as REF3076 that can compromise 59 banking, fintech, and cryptocurrency platforms. The malware is believed to be a substantially upgraded variant of Maverick and spreads through a worm component called SORVEPOTEL.