Skip to content
TamperedChef Malware Campaign Targets Key Industries with Fake Installers

TamperedChef Malware Campaign Targets Key Industries with Fake Installers

First seen 21 Nov 2025, 05:18 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster March 12, 2026 at 13:27 UTC

The TamperedChef malware campaign has been identified as targeting organizations in healthcare, construction, and manufacturing sectors by distributing malicious software disguised as legitimate applications. Attackers are using poisoned search engine results to redirect users to compromised installers that deploy a JavaScript backdoor. The campaign employs SEO tactics and malvertising to lure victims into downloading these counterfeit installers.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 182d ago How this analysis works

More articles in this cluster (3)

Following this threat?

Track TamperedChef in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed