A new trojan, TCLBanker, has emerged with a highly aggressive self-propagation mechanism targeting 59 banking and cryptocurrency platforms. According to BleepingComputer, the malware utilizes trojanized MSI installers for legitimate tools like the Logitech AI Prompt Builder. Once a system is infected, TCLBanker attempts to spread via WhatsApp and Outlook by hijacking active sessions to send malicious links to the victim's contacts. This 'worm-like' behavior in a banking trojan marks a return to high-velocity infection tactics, moving beyond simple phishing to social-circle exploitation. The malware is designed to intercept credentials and session tokens for fintech platforms, posing a significant risk to both individual and corporate financial assets. The use of AI-themed lures (Logitech AI) demonstrates how threat actors are capitalizing on the current technology zeitgeist to lower user suspicion.