Product
PyInstaller
- First Reported
- Jan 15, 2026
- Latest Reported
- Jul 14, 2026
Reported Context (2)
- A PyInstaller-packed Python payload (pepesoft.exe). The recovered payloads use downloader-supplied AWS-style key material to retrieve remote configuration, authenticate to Google Sheets, bind activations to hardware, 11 Malicious NuGet Game-Tool Packages Download Windows Payloads with Surveillance and Remote-Control Features
- its effective design, the malware demonstrates moderate technical complexity. It is packaged as a PyInstaller executable containing obfuscated Python bytecode, uses base64-encoded regular expressions for wallet Discord Social Engineering Spreads Clipboard Hijacker Targeting Crypto Transactions
Malware (3)
Threat Actors (1)
MITRE ATT&CK (21)
Vendors (11)
Products (10)
Tools (3)
Industries (5)
Countries (4)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.