Don’t trust TrustConnect: This fake remote support tool only helps hackers
Summary
TrustConnect is a fake remote monitoring and management tool (software that lets attackers control compromised computers) sold as malware-as-a-service (a subscription service that provides hacking tools), costing $300 per month. Attackers trick users into installing it by sending emails with fake download links pretending to be legitimate software like Zoom or Microsoft Teams, then use it to remotely control infected machines. Researchers at Proofpoint disrupted some of the malware's infrastructure, but the attackers quickly created a similar tool called DocConnect to continue their operations.
Solution / Mitigation
Proofpoint shared a list of indicator URLs to support detection efforts. Additionally, Proofpoint disrupted some of the malware's infrastructure with help from intelligence partners, though this disruption was temporary as attackers demonstrated resilience by creating alternative fake RMM websites.
Classification
Original source: https://www.csoonline.com/article/4135307/dont-trust-trustconnect-this-fake-remote-support-tool-only-helps-hackers.html
First tracked: February 20, 2026 at 03:00 PM
Classified by LLM (prompt v3) · confidence: 95%