Tracking TamperedChef Clusters via Certificate and Code Reuse

Reported 20 May 2026 by otx · Severity: medium

Multiple threat clusters designated as CL-CRI-1089, CL-UNK-1090, and CL-UNK-1110 have been distributing trojanized productivity software through malicious advertising campaigns since 2023. These applications, including PDF editors, calendars, and compression tools, appear legitim