Trojanized Terraform Provider Delivers Cross-Platform Malware to Steal Developer Credentials

Zscaler ThreatLabz has uncovered a July 2026 campaign that hides malware in a trojanized Terraform provider. It targets developer workstations and CI/CD systems. The activity overlaps heavily with TraderTraitor, the North Korean state-backed group also tracked as Jade Sleet, UNC4899, Pressure Chollima and Slow Pisces. It also overlaps with the... Weiterlesen: Trojanized Terraform Provider Delivers Cross-Platform Malware to Stea…