T1116 - Code Signing

MITRE ATT&CK

Threat entity extracted from intelligence sources

Frequency

6

occurrences

First Seen

October 31, 2025

Last Seen

November 21, 2025

Overview

Recent Events

Relationships

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Related Clusters (5)

TamperedChef Malware Campaign Targets Key Industries with Fake Installers

Nov 21·3 sources

Shift in Ransomware Tactics Targeting Cloud Assets

Nov 19·56 sources

Rhysida Ransomware Gang Uses Fake Microsoft Teams Ads for Malware Distribution

Nov 4·8 sources

Rhysida Ransomware Gang Uses Fake Microsoft Teams Ads to Infect Users

Nov 2·3 sources

TamperedChef Malware Campaign Targets Key Sectors with Fake Installers

Nov 21·3 sources

Related Articles (6)

TamperedChef malware uses fake installers to target key sectors

Securitybrief.Au·Nov 21

TamperedChef malware uses fake installers to target key sectors

Securitybrief·Nov 21

Frontline Intelligence: Analysis of UNC1549 TTPs, Custom Tools, and Malware Targeting ...

Cloud.Google·Nov 17

Rhysida ransomware exploits Microsoft certificate to slip malware past defenses

Csoonline·Nov 3

Ransomware gang runs ads for Microsoft Teams to pwn victims

Theregister·Oct 31

1 / 2

Related Entities

Unc1549 Vanilla Tempest Malware Ransomware Phishing Rhysida campaign Azure Citrix United States Germany Healthcare Manufacturing