Threat Intelligence / Actor / TamperedChef / EvilAI operators (financially motivated, unattributed)

TamperedChef / EvilAI operators (financially motivated, unattributed)

1 tracked threat(s) · Categories: MALWARE

Also known as: TamperedChef, EvilAI, ManualFinder, OneStart, CL-CRI-1089, CL-UNK-1090, CL-UNK-1110

Tracked threats

TamperedChef (EvilAI) Activity Clusters — Trojanized Productivity Apps Deliver RATs/Stealers via Malvertising; 4,000+ Samples, 81 Code-Signing Orgs Tracked (Unit 42) — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence