Proofpoint Uncovers TrustConnect RAT Disguised as Legitimate RMM Software

Proofpoint researchers identified a remote access trojan (RAT) named TrustConnect, disguised as legitimate remote monitoring and management (RMM) software, being sold to cybercriminals as a service. The malware was promoted via a fraudulent business website (trustconnectsoftware[.]com) created using an LLM, falsely attributed to "TrustConnect Software PTY LTD." The site was designed to deceive certificate providers and the public into believing the software was legitimate. No specific attack timeline or victim impact was detailed. The discovery was reported in February 2026.