Tool
Deception Pro
- First Reported
- Aug 25, 2026
- Latest Reported
- Nov 2, 2026
Reported Context (3)
- For this, we use Deception.Pro. Signed Funding-Form Decoy Delivers an Unattributed Plugin-Based RAT
- Tools used: Malcat, msitools, osslsigncode, Python (pefile, capstone, pycryptodome), js-beautify, FLOSS, capa, ANY.RUN and Deception Pro. Signed PuTTY Installer Hides a Node.js Malware Loader
- Proofpoint was able to observe this activity using the Deception Pro malware observability environment. TA4922 Deploys PackClient RAT in Tax-Themed Phishing Campaigns Targeting China and India
Malware (5)
People (1)
Threat Actors (1)
MITRE ATT&CK (34)
Vendors (5)
Products (15)
Tools (12)
Countries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.