Malicious mmcompat.pth Persistence File Created in site-packages

Duo Tech@duotech

•updated Jul 24, 2026•0•0•1

Detects creation of the mmcompat.pth file in Python site-packages, the mrmustard stealer's persistence mechanism designed to survive package uninstall.