news.mlab.sh
Back to the feed
malware

Tracking TamperedChef Clusters via Certificate and Code Reuse

High
Image: Palo Alto Unit 42
Summary

This report details ongoing activity clusters closely resembling the TamperedChef (EvilAI) malware campaign, which involves trojanized productivity software like PDF editors and calendars. These campaigns utilize malicious ads and sophisticated techniques, including long dormancy periods and continuous command and control, to deliver payloads such as information stealers and RATs. Palo Alto Unit 42 has tracked over 4,000 samples across numerous variants, highlighting the ongoing threat posed by this type of stealthy malware.

Read the full article at Palo Alto Unit 42

Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data

Report an error
Confirmed errors are fixed and listed on /corrections.