Loading story…
Threat actors have launched a sophisticated malware campaign, dubbed EvilAI, that leverages seemingly legitimate artificial intelligence (AI) and productivity tools to infiltrate organizations worldwide. Security researchers from Trend Micro have identified that the campaign targets a broad range of sectors, including manufacturing, government, healthcare, technology, and retail. The malware is distributed through applications that appear authentic, such as AppSuite, Epi Browser, JustAskJacky, Manual Finder, OneStart, PDF Editor, Recipe Lister, and Tampered Chef. These applications are designed to function as normal software while secretly delivering malicious payloads in the background. The attackers have enhanced their deception by using code signing certificates from disposable companies, making the malicious software appear trustworthy to both users and security controls. The campaign has achieved a global reach, with infections reported in India, the United States, France, Italy, Brazil, Germany, the United Kingdom, Norway, Spain, and Canada. Researchers have noted that the rapid and widespread distribution of EvilAI indicates an active and evolving threat, rather than isolated incidents. The malware is capable of a range of nefarious activities, including data theft, system compromise, and establishing persistence within victim environments. The use of SEO poisoning and signed binaries further increases the likelihood of successful infections, as users are more likely to trust and download these applications. The Tampered Chef application, in particular, has been highlighted as one of the deceptive apps used in this campaign, employing signed binaries and SEO manipulation to hijack browsers and facilitate further compromise. Security firms such as Expel, G DATA, and TRUESEC have also documented aspects of the EvilAI campaign, underscoring its complexity and the collaboration among threat intelligence communities to track its evolution. The attackers' ability to blur the line between legitimate and malicious software poses significant challenges for traditional security defenses. Organizations are urged to exercise caution when downloading and installing AI or productivity tools, especially those from unverified sources. The campaign's technical sophistication, global impact, and use of advanced evasion techniques make it a significant concern for cybersecurity professionals. Ongoing monitoring and intelligence sharing remain critical to detecting and mitigating the threat posed by EvilAI. The campaign demonstrates the increasing trend of threat actors exploiting the popularity of AI tools to gain initial access to enterprise environments. Security teams should prioritize user education, application whitelisting, and robust endpoint protection to defend against such deceptive malware campaigns.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
On September 29, 2025, separate security reports described malware campaigns in which threats masqueraded as AI tools or deceptive applications, using techniques such as signed binaries and SEO poisoning to compromise organizations and hijack browsers. The provided references do not include earlier dated milestones such as initial discovery, attribution, or remediation actions.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The EvilAI campaign leverages AI-generated code and convincingly fake productivity or AI-enhanced applications, complete with valid digital signatures, to bypass security controls and compromise organizations worldwide. The malware is distributed via newly registered websites, malicious ads, and social media, targeting sectors such as manufacturing, government, and healthcare, with significant infections in India, the US, and Europe. EvilAI acts as a stager, establishing persistence, exfiltrating browser credentials, and preparing systems for further payloads, while employing advanced obfuscation and anti-analysis techniques to evade detection.
Jun 29, 2026
Threat actors are increasingly leveraging fake websites and bogus software installers to distribute malware, employing advanced techniques such as AI-generated web pages and code-signed malicious applications. One campaign involves the use of the legitimate Syncro remote access tool, where attackers create their own signed builds and distribute them via mass-generated, AI-powered fake websites that closely mimic official application sites. These malicious sites are promoted through search engine optimization and phishing emails, often masquerading as trusted brands like antivirus or password management tools, to trick users into downloading malware-laden installers. Another ongoing global campaign, dubbed TamperedChef, uses counterfeit installers for popular software to deliver JavaScript-based remote access malware. The attackers utilize malvertising, SEO, and abused digital certificates from shell companies to increase the credibility of their malicious payloads. The infrastructure supporting these campaigns is described as industrialized, with operators regularly acquiring new code-signing certificates to evade detection. Both campaigns highlight the growing sophistication and scale of malvertising operations targeting users through deceptive download sites and installer packages.
Jun 29, 2026
Researchers reported that the **TamperedChef** malware operation, also tracked as **EvilAI**, has distributed trojanized productivity software through malvertising and polished download sites, posing as tools including **Calendaromatic**, **DocuFlex**, **AppSuite PDF**, **OneZip**, **CrystalPDF**, **PDF-Ezy**, and **RapiDoc**. The campaign has been active since early 2023 and uses valid code-signing certificates, delayed second-stage delivery, persistence mechanisms, and stealthy execution to evade detection while deploying adware, browser hijackers, information stealers, RATs, and proxy-style payloads. Unit 42 said it identified more than **4,000 unique samples** and **100+ variants**, with infections observed in more than half of monitored enterprise environments. Analysis of the **rapidoc** subcluster linked the activity to broader fake-app campaigns and highlighted code reuse, certificate rotation, and infrastructure overlap with related **BaoLoader** activity. Researchers described two main branches: a **Calendaromatic** `7zSFX` dropper line tied to shell companies including **CROWN SKY LLC** and **MARKET FUSION INNOVATIONS LLC**, and a **Neutralinojs**-based **RapiDoc** stage-0 line tied to **CANDY TECH LTD**. A recurring tracking artifact was the **GlobalSign GCC R45 EV CodeSigning CA 2020** sub-CA certificate with serial `77BD0E05B7590BB61D4761531E3F75ED`, which was used to connect shell-company activity across Israel, Ukraine, Panama, Malaysia, Estonia, and the United States; researchers also found an unsigned sibling sample communicating with `calendaromatic.com`, suggesting some operators may be dropping code signing to reduce attribution risk.
Jun 29, 2026