PurpleDelta persona-fabrication tooling on endpoint

Duo Tech@duotech

•updated Aug 18, 2026•3•0•4

Detects presence of persona-fabrication and identity-fraud enablement software (Wavebox, MEmu, eSIM Plus, Blacktel, insertFace, TrustID Card) via process, network, or file-system artifacts on an endpoint, consistent with PurpleDelta identity-fraud tradecraft.