Online Safety

TamperedChef Malware: How Signed Productivity Apps Are Delivering Stealers and RATs A new malware campaign called TamperedChef is making it harder to tell safe app installers from dangerous ones. Attackers are using digitally signed installers that look exactly like popular productivity software—Zoom, Microsoft Teams, Slack—but actually contain credential stealers and remote access trojans (RATs). The campaign was detailed by CyberSecurityNews on May 21, 2026, and it’s a reminder that even a “verified publisher” warning in Windows isn’t a guarantee of safety. ...

Beware: Signed Productivity Apps Now Spreading Stealer Malware — How to Stay Safe If you’ve ever downloaded a productivity app like Microsoft Office or a tool from a well-known publisher, you may have noticed that the installer displays a “signed by” message. That digital signature is meant to guarantee the software comes from a legitimate source and hasn’t been tampered with. But a new malware campaign called TamperedChef is exploiting that trust. According to recent cybersecurity reports, attackers are using signed applications—often repackaged versions of popular productivity software—to deliver information stealers and remote access trojans (RATs) to unsuspecting users. ...

TamperedChef Malware: How Signed Apps Are Being Used to Steal Your Data A new malware campaign is taking advantage of a trust mechanism most users rely on: digital signatures. Called TamperedChef, it hides inside legitimate-looking copies of popular productivity software. If you use tools like Notepad++, 7‑Zip, or other free utilities, it is worth understanding how this works and what you can do to stay safe. ...

TamperedChef Malware Uses Signed Apps to Sneak In – Here’s How to Protect Yourself A new malware campaign called TamperedChef is targeting everyday users by hiding inside signed versions of popular productivity apps. Unlike many threats that rely on obvious tricks, this one uses valid digital signatures to bypass basic security checks. Recent reports from May 2026 suggest the attacks are active and spreading through fake download sites and phishing emails. ...

Watch Out: Malware Hides Inside Signed Productivity Apps to Steal Your Data If you regularly download productivity apps to stay organized, you might be the target of a new malware campaign. Researchers have identified a threat called TamperedChef that uses digitally signed applications to install credential stealers and remote access trojans (RATs). The twist: the apps look legitimate and even pass basic security checks, making them harder to spot than typical fake software. ...

Medical Imaging AI Raises New Privacy Risks: What Patients Need to Know Medical imaging has become a crucial part of modern diagnostics, and artificial intelligence is increasingly used to interpret X-rays, MRIs, and CT scans faster than human radiologists. The promise is real—earlier detection, fewer missed findings, and less workload for overburdened clinicians. But a growing body of research from the Radiological Society of North America (RSNA) suggests a less discussed side effect: AI in medical imaging creates new privacy and security risks that patients should not ignore. From deepfake X-rays that fool both doctors and algorithms to large language model (LLM) threats that can bypass security systems, the vulnerabilities are more than theoretical. This article explains what is happening, why it matters to you, and what steps you can take to protect your medical images. ...

How to Protect Your PC from TamperedChef Malware Hiding in Signed Productivity Apps A new malware campaign called TamperedChef is currently spreading by hiding inside legitimate productivity applications that still carry valid digital signatures. Instead of relying on typical tricks like fake updates or malicious macros, the attackers take real software—such as Notepad++, PDF editors, and file converters—and repackage them with information stealers and remote access trojans (RATs). Because the modified installer still bears a legitimate digital signature, many antivirus tools and users treat it as safe. ...

Hackers Are Using Fake Signed Productivity Apps to Infect Your PC—Here’s How to Stay Safe If you’ve ever downloaded a productivity tool like Zoom, Slack, or Notion from a search result rather than the official site, you’ve probably felt safe when Windows or macOS showed a “signed by a verified publisher” message. That green checkmark is supposed to mean the software hasn’t been tampered with and came from a legitimate developer. But a recently uncovered malware campaign called TamperedChef shows that trust can be misplaced. Attackers are using valid digital signatures on trojanized versions of these apps to slip past antivirus and straight onto your machine. ...

New TamperedChef Malware Hides Inside Signed Productivity Apps A recently uncovered malware campaign—dubbed TamperedChef—is using digitally signed productivity applications to bypass security defenses and deliver stealers and remote access trojans (RATs) to victims’ machines. The technique is not entirely new, but it underscores how attackers continue to exploit trust in code signing to slip past antivirus and endpoint detection. ...

Beware of Fake ‘Productivity’ Apps: New Malware Steals Data Using Signed Software Intro Most people assume that if an app shows a legitimate digital signature, it’s safe to install. That assumption is exactly what the creators of a new malware campaign, dubbed TamperedChef, are exploiting. First reported on May 21, 2026, by CyberSecurityNews, TamperedChef uses signed productivity applications to slip stealers and remote access trojans (RATs) onto users’ systems. This is a reminder that even software that appears to come from a trusted publisher can be dangerous. ...