# TrustConnect RAT: Inside a Vibe-Coded Malware Ecosystem

Page: https://stenobird.com/podcast/discarded-tales-from-the-threat-research-trenches-5154469/trustconnect-rat-inside-a-vibe-coded-malware-ecosystem
Text version: https://stenobird.com/podcast/discarded-tales-from-the-threat-research-trenches-5154469/trustconnect-rat-inside-a-vibe-coded-malware-ecosystem.md
Podcast: [DISCARDED: Tales From the Threat Research Trenches](https://stenobird.com/podcast/discarded-tales-from-the-threat-research-trenches-5154469)
Published: 2026-03-10T08:00:00+00:00
Episode link: https://www.buzzsprout.com/2445401/episodes/18820138-trustconnect-rat-inside-a-vibe-coded-malware-ecosystem.mp3
Audio file: https://www.buzzsprout.com/2445401/episodes/18820138-trustconnect-rat-inside-a-vibe-coded-malware-ecosystem.mp3
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/discarded-tales-from-the-threat-research-trenches-5154469/episodes/trustconnect-rat-inside-a-vibe-coded-malware-ecosystem
Duration seconds: 2568

## Resource

Send us fan mail! Hello to all our Cyber Pals! Host Selena Larson and co-host, Tim Kromphardt, chat with Tommy Madjar, Senior Threat Researcher from Proofpoint, to unpack one of the strangest malware investigations of the year: TrustConnect RAT. What started as a seemingly legitimate remote management tool quickly unraveled into a bizarre, fast-evolving ecosystem of “vibe-coded” malware. TrustConnect masqueraded as a polished RMM platform—complete with fake testimonials, inflated customer cou...

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/discarded-tales-from-the-threat-research-trenches-5154469/episodes/trustconnect-rat-inside-a-vibe-coded-malware-ecosystem/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/discarded-tales-from-the-threat-research-trenches-5154469/trustconnect-rat-inside-a-vibe-coded-malware-ecosystem.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.