New Malware Pretends to Be Productivity Apps, and Bypasses Security with Real Signatures
New Malware Pretends to Be Productivity Apps, and Bypasses Security with Real Signatures Attackers behind a campaign tracked as TamperedChef are distributing malware through fake installers of widely used productivity apps such as Microsoft Teams, Zoom, and Slack. What makes this campaign especially hard to spot is that the malicious installers carry valid digital signatures, often from stolen or misused code-signing certificates. This allows the malware to bypass some standard security checks that users and antivirus software rely on to distinguish legitimate software from harmful files. ...