Signed Apps

TamperedChef Malware Spreads Through Fake Productivity Apps That Look Genuine A new malware campaign known as TamperedChef is tricking users by distributing fake productivity applications that carry valid digital signatures. Discovered in May 2026, the operation targets people searching for tools like Microsoft Teams, often via fake download pages or search engine ads. Once installed, these apps deliver remote access trojans (RATs) and information stealers, including ValleyRAT. ...

New Malware Hides Inside Legitimate-Looking Productivity Apps – Here’s How to Stay Safe A new campaign dubbed TamperedChef is making the rounds, using digitally signed productivity apps to drop credential stealers and remote access trojans (RATs) onto victims’ devices. What makes it difficult to spot is that these apps appear to be signed with legitimate certificates, which can trick both users and some automated security checks. Here’s what’s happening and how you can avoid being a target. ...

TamperedChef Malware: How Hackers Hide in Signed Productivity Apps – and How to Stay Safe Another wave of malware is making the rounds, and this one has a trick that makes it harder to spot. Security researchers have identified a campaign called TamperedChef that delivers dangerous software—info-stealers and remote access trojans (RATs)—by hiding inside productivity applications that appear to be legitimately signed. If you’ve ever downloaded a copy of Microsoft Teams, Zoom, or Slack from anywhere other than the official source, this is worth a close look. ...

How to Stay Safe from TamperedChef Malware Hiding in Productivity Apps If you’ve ever downloaded an installer for Microsoft Teams, Slack, or Zoom from a third-party site, you may have bypassed the official source and gotten something else. A recent malware campaign called TamperedChef is doing exactly that: it uses signed installers of common productivity apps to sneak past security checks and deliver information stealers and remote access trojans (RATs). According to cybersecurity news reports from late May 2026, the campaign is active and targets remote workers and small business owners who rely on these tools. ...

Sneaky Malware Hides Inside Signed Productivity Apps: What to Do A new malware campaign called TamperedChef takes advantage of a simple fact: most people trust apps with a valid digital signature. The attackers sign malicious installers using stolen or forged certificates, making them look like legitimate productivity tools—Microsoft Teams, Slack, or Zoom. Once installed, the software drops infostealers and remote access trojans (RATs) instead of the promised app. ...

Malware That Hides in Signed Apps: How to Protect Yourself from TamperedChef If you download productivity software like Microsoft Teams, Office tools, or collaboration apps, you probably assume that if the file has a valid digital signature, it’s safe. A newly documented campaign called TamperedChef shows why that assumption can be dangerous. Attackers are using signed, but malicious, versions of popular apps to deliver information stealers and remote access trojans (RATs). Here’s what’s happening and what you can do about it. ...

How Malware Hides in Signed Apps: What the TamperedChef Campaign Means for Your Downloads You’ve probably heard the advice: only install apps from official sources and check that they are digitally signed. That’s still good guidance, but it’s not foolproof. A recent malware campaign called TamperedChef shows that even signed productivity apps can be weaponized to deliver stealers and remote access trojans (RATs). Understanding how this works and what you can do about it can help you avoid becoming a victim. ...

TamperedChef Malware Lurks Inside Signed Apps: What You Need to Know Now A new wave of malware is making the rounds, and it’s doing something that might surprise you – hiding inside legitimate-looking, digitally signed copies of everyday productivity tools. Known as TamperedChef, this campaign has been delivering information stealers and remote access trojans (RATs) to unsuspecting users, primarily through apps like TeamViewer, Slack, and Microsoft Teams. Here’s what’s going on and how to keep your devices safe. ...