Signed Software

Malware Is Hiding in Signed Productivity Apps: What to Know and How to Stay Safe If you use apps like Notion, Slack, or Trello for work or personal projects, you probably assume they’re safe. They come from well-known developers, often have official-looking download pages, and may even show a valid digital signature when you install them. But a new strain of malware called TamperedChef is exploiting that trust. According to cybersecurity researchers, attackers are using signed, legitimate-looking copies of productivity applications to deliver information stealers and remote access trojans (RATs) onto unsuspecting users’ devices. ...

TamperedChef Malware Exploits Signed Apps: Here’s How to Stay Safe A new malware campaign called TamperedChef is making the rounds, and it’s worth paying attention to even if you consider yourself careful with downloads. What makes it different is that the malicious installers are digitally signed—meaning they carry a certificate that usually signals to your computer and security software that the software is legitimate. That trust is exactly what the attackers are exploiting. ...