Skip to content
TamperedChef Malware Campaign Targets Key Sectors with Fake Installers

TamperedChef Malware Campaign Targets Key Sectors with Fake Installers

First seen 2 Dec 2025, 18:33 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

The TamperedChef malware campaign has been identified as targeting organizations in healthcare, construction, and manufacturing sectors by distributing malicious software disguised as legitimate applications. Attackers utilize search engine optimization and online advertising to lure victims into downloading compromised installers, which can lead to the installation of a JavaScript backdoor. This global malvertising effort has involved poisoning search results to redirect users to malicious links.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 202d ago How this analysis works

More articles in this cluster (3)

Following this threat?

Track TamperedChef in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed