Tag: docuflex

1 Attack Reports | 0 Vulnerabilities

Attack reports

Tracking TamperedChef Clusters via Certificate and Code Reuse

Multiple threat clusters designated as CL-CRI-1089, CL-UNK-1090, and CL-UNK-1110 have been distributing trojanized productivity software through malicious advertising campaigns since 2023. These applications, including PDF editors, calendars, and compression tools, appear legitimate but contain rem…
information stealers
justaskjacky
tamperedchef
evilai
calendaromatic
code-signing abuse
2026-05-20
appsuite pdf
cl-cri-1089
cl-unk-1090
crystalpdf
docuflex
fileease
gifsmakerpro
gocookmate
justconvertfiles
malvertising campaigns
manualreaderpro
manualzpdf
onezip
pdfpilot
pdfprime
rapidoc
rocketpdfpro
screensrecorder
shinypdf
swiftnav
trojanized productivity software
zipmakerpro
Published: May 20, 2026
Linked vulnerabilities : CVE-2026-1731 (CVSS 9.9)
Downloadable IOCs: 3
Click here to see more Attack Reports