Zulip is a tool tracked across 1 threat cluster and 2 intelligence report mentions on ThreatCluster. First observed May 6, 2026; most recent activity May 8, 2026.
Beginning in July 2025, malicious wheel packages were uploaded to the Python Package Index (PyPI) by the OceanLotus group, delivering a new malware family named ZiChatBot. This malware targets both Windows and Linux…