Vendor-published case study
Critical reading · Sep 15, 2026
What the source supports
Proofpoint reports over a month of post-compromise observations in a decoy.
Question for evaluation
Which adversary-behavior hypothesis changed from that observation?
This note is bounded by the material shown under “Review depth”. It is not an independent test.
Evidence limits
A selected case does not measure detection of missed attacks or generalizability.
Sources and provenance
- Cargo Theft Actor in a Persistent Decoy
source-page · 2026-09-15
Reviewed: 2026-09-15. This record may change when new evidence is found.