Netskope Threat Labs

Masson

ATP Sandbox Adv. Heuristics

Masson (a.k.a. Dripion) is a trojan family that has been around since at least 2016 and first drew attention targeting victims in Taiwan. Its installers disguise themselves as legitimate software and language packs, and the malware stages additional components that steal data and maintain access on infected systems. The family's regional focus and software impersonation lures make it a representative example of targeted consumer focused trojans.

First seen
May 2022
Last seen
September 2026
Alert Name
ByteCode-MSIL.Trojan.Masson
Win32.Trojan.Masson
Win64.Trojan.Masson