Loading story…
The EvilAI campaign leverages AI-generated code and convincingly fake productivity or AI-enhanced applications, complete with valid digital signatures, to bypass security controls and compromise organizations worldwide. The malware is distributed via newly registered websites, malicious ads, and social media, targeting sectors such as manufacturing, government, and healthcare, with significant infections in India, the US, and Europe. EvilAI acts as a stager, establishing persistence, exfiltrating browser credentials, and preparing systems for further payloads, while employing advanced obfuscation and anti-analysis techniques to evade detection.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Threat actors have launched a sophisticated malware campaign, dubbed EvilAI, that leverages seemingly legitimate artificial intelligence (AI) and productivity tools to infiltrate organizations worldwide. Security researchers from Trend Micro have identified that the campaign targets a broad range of sectors, including manufacturing, government, healthcare, technology, and retail. The malware is distributed through applications that appear authentic, such as AppSuite, Epi Browser, JustAskJacky, Manual Finder, OneStart, PDF Editor, Recipe Lister, and Tampered Chef. These applications are designed to function as normal software while secretly delivering malicious payloads in the background. The attackers have enhanced their deception by using code signing certificates from disposable companies, making the malicious software appear trustworthy to both users and security controls. The campaign has achieved a global reach, with infections reported in India, the United States, France, Italy, Brazil, Germany, the United Kingdom, Norway, Spain, and Canada. Researchers have noted that the rapid and widespread distribution of EvilAI indicates an active and evolving threat, rather than isolated incidents. The malware is capable of a range of nefarious activities, including data theft, system compromise, and establishing persistence within victim environments. The use of SEO poisoning and signed binaries further increases the likelihood of successful infections, as users are more likely to trust and download these applications. The Tampered Chef application, in particular, has been highlighted as one of the deceptive apps used in this campaign, employing signed binaries and SEO manipulation to hijack browsers and facilitate further compromise. Security firms such as Expel, G DATA, and TRUESEC have also documented aspects of the EvilAI campaign, underscoring its complexity and the collaboration among threat intelligence communities to track its evolution. The attackers' ability to blur the line between legitimate and malicious software poses significant challenges for traditional security defenses. Organizations are urged to exercise caution when downloading and installing AI or productivity tools, especially those from unverified sources. The campaign's technical sophistication, global impact, and use of advanced evasion techniques make it a significant concern for cybersecurity professionals. Ongoing monitoring and intelligence sharing remain critical to detecting and mitigating the threat posed by EvilAI. The campaign demonstrates the increasing trend of threat actors exploiting the popularity of AI tools to gain initial access to enterprise environments. Security teams should prioritize user education, application whitelisting, and robust endpoint protection to defend against such deceptive malware campaigns.
Jun 29, 2026
Researchers reported a large-scale **malware distribution campaign** that used fake software offerings hosted on trusted platforms to infect users, with operators increasingly relying on **AI-assisted or “vibe-coded” development** to scale payload creation. McAfee identified more than **443 malicious ZIP archives** masquerading as AI tools, game cheats, VPNs, drivers, and decryptors, distributed via services including *Discord*, *SourceForge*, *FOSSHub*, *MediaFire*, and *mydofiles.com*. The campaign used **48 variants** of `WinUpdateHelper.dll` across **17 kill chains**, each with separate command-and-control infrastructure but linked through shared cryptocurrency wallet credentials, allowing researchers to trace monetization activity and victim distribution across countries including the US, UK, India, Brazil, France, Canada, and Australia. A separate but related report described another **multi-stage malware campaign** that also relied on deceptive delivery and evasion, using **.NET Ahead-of-Time (AOT) compilation** to hinder analysis and a host-scoring system to avoid sandboxes and low-value targets. In that intrusion chain, a phishing-delivered ZIP launched `KeyAuth.exe`, which fetched `bound_build.exe` and then deployed both the **Rhadamanthys infostealer** and an **XMRig** miner disguised as *MicrosoftEdgeUpdater*. The malware checked conditions such as RAM, uptime, document count, and active antivirus processes, and terminated itself if the environment scored below a threshold, showing a deliberate effort to evade detection while maximizing successful infections.
Jun 29, 2026
Threat actors are increasingly leveraging fake websites and bogus software installers to distribute malware, employing advanced techniques such as AI-generated web pages and code-signed malicious applications. One campaign involves the use of the legitimate Syncro remote access tool, where attackers create their own signed builds and distribute them via mass-generated, AI-powered fake websites that closely mimic official application sites. These malicious sites are promoted through search engine optimization and phishing emails, often masquerading as trusted brands like antivirus or password management tools, to trick users into downloading malware-laden installers. Another ongoing global campaign, dubbed TamperedChef, uses counterfeit installers for popular software to deliver JavaScript-based remote access malware. The attackers utilize malvertising, SEO, and abused digital certificates from shell companies to increase the credibility of their malicious payloads. The infrastructure supporting these campaigns is described as industrialized, with operators regularly acquiring new code-signing certificates to evade detection. Both campaigns highlight the growing sophistication and scale of malvertising operations targeting users through deceptive download sites and installer packages.
Jun 29, 2026