Online Safety

New Malware Hides Inside Signed Productivity Apps – Here’s How to Stay Safe If you’ve ever downloaded a free PDF editor or a note-taking app from a third-party site, you may have assumed it was safe because the installer was digitally signed. A recent threat called TamperedChef shows why that assumption no longer holds. Security researchers have documented how this malware uses legitimate code-signing certificates to distribute stealers and remote access trojans (RATs) through productivity applications that appear trustworthy. ...

Malware Hides in Signed Productivity Apps: What to Watch For A new malware campaign is targeting people who download productivity apps like office suites and collaboration tools. Security researchers have identified a threat they’re calling TamperedChef—malware that arrives inside what looks like a legitimate, signed application. The problem is that the digital signature checks out, even though the app itself is dangerous. ...

TamperedChef Malware: How Signed Productivity Apps Are Spreading Stealers and RATs Most people assume that if a piece of software carries a valid digital signature from a known vendor, it’s safe to run. Cybercriminals behind a recently spotted campaign called TamperedChef are exploiting that trust. They are taking legitimate, signed productivity applications—like Microsoft Office and Google Workspace programs—modifying them to include malware, and then distributing the tampered copies through fake download sites and phishing emails. ...

Signed Productivity Apps Hiding Malware: How to Stay Safe from TamperedChef A new malware strain called TamperedChef is spreading through productivity applications that carry valid digital signatures. It is a reminder that even software that looks legitimate can be dangerous. ...

How to Stay Safe From Malware Hidden in Productivity Apps A recent cybersecurity campaign known as TamperedChef demonstrates a troubling trend: malware that appears legitimate because it is signed with a valid digital certificate. Instead of relying on obvious tricks, the attackers distribute corrupted versions of widely used productivity applications — such as office suites, video conferencing tools, and messaging clients — to install information stealers and remote access trojans (RATs). For anyone who downloads software from less official channels, this campaign is a reminder to verify sources before clicking. ...

The One AI Privacy Risk That Worries Proton’s CEO—And How to Protect Yourself Intro Using AI tools like ChatGPT, Gemini, or Microsoft Copilot has become routine for many of us. They help with writing, research, coding, and everyday tasks. But these conveniences come with a trade-off: the data you feed into them is often stored, analyzed, and sometimes used to train future models. In a recent interview with Spiceworks, Proton’s CEO Andy Yen shared what keeps him up at night when it comes to AI privacy—and it’s a risk many users overlook. Here’s what he said, and practical steps you can take today. ...

New Malware Hides Inside Signed Productivity Apps: How to Protect Yourself A fresh malware campaign, tracked as TamperedChef, is using digitally signed copies of productivity applications to infect devices with information stealers and remote access Trojans (RATs). Because the malware carries valid digital signatures, it can bypass many common security checks. For ordinary users who rely on applications like Microsoft Office or Google Workspace tools, knowing how to spot the fakes and what to do after an infection is more important than ever. ...

Proton CEO on AI Privacy: What Keeps Him Up at Night and What You Can Do Intro If you use tools like ChatGPT, Gemini, or Microsoft Copilot, you’ve probably wondered what happens to the data you feed them. Many people assume their conversations are private, but the reality is more complicated. AI companies often collect and store inputs to improve their models, and that data can be exposed in ways users don’t expect. ...

Proton’s CEO on AI Privacy: The One Risk That Worries Him Most AI tools are now part of everyday life—helping with writing, research, and even personal organization. But as adoption grows, so do concerns about how these tools handle our data. In a recent interview with Spiceworks, Proton’s CEO Andy Yen acknowledged that privacy in the AI era is achievable, but he also pointed to one specific threat that keeps him up at night. ...

TamperedChef Malware: How to Spot Fake Signed Productivity Apps You might think that a digital signature on a downloaded installer means it’s safe. In theory it does, but attackers have found ways around that protection. A campaign called TamperedChef, reported in late May 2026, is using signed productivity applications to deliver malware that steals credentials and gives attackers remote control of infected machines. ...