Threat Actors Leverage Google Ads to Promote PDF Editor Weaponized With TamperedChef

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Malvertising Campaign Distributes TamperedChef via Google Ads A malvertising campaign identified in September 2025 has targeted Windows users by promoting fake PDF editing applications through Google Ads. The malware, known as TamperedChef, has compromised over 100 organizations across 19 countries, stealing browser credentials and establishing backdoor access on infected systems. 3 sources 36