RVTools is a tool tracked across 1 threat cluster and 2 intelligence report mentions on ThreatCluster. First observed May 29, 2026; most recent activity May 29, 2026.
A counterfeit RVTools installer is utilizing a legitimate Sectigo code-signing certificate to bypass Microsoft Defender SmartScreen and other endpoint protections. This malicious software deploys a multi-stage…