A fake AWS-related Terraform add-on runs malicious code when loaded.
Zscaler ThreatLabz says the campaign may affect Windows, macOS and Linux—and is especially relevant…

A fake AWS-related Terraform add-on runs malicious code when loaded.
Zscaler ThreatLabz says the campaign may affect Windows, macOS and Linux—and is especially relevant…
"Suspected TraderTraitor Group Uses Trojanized Terraform Provider to Deliver Cross-Platform Malware" published by Zscaler. #TraderTraitor, #FLATROOF, #ROOFDECK https://www.zscaler.com/blogs/security-research/suspected-tradertraitor-group-uses-trojanized-terraform-provider-deliver
Trojanized Terraform provider hides backdoors in .woff font files - cloud engineers beware. https://intel.threadlinqs.com/threat/TL-2026-3071 #ThreatIntel #FLATROOF #ROOFDECK #Trojanized
DPRK's Jade Sleet weaponized a fake job interview to drop macOS backdoors - one hides C2 inside Nostr relays. https://intel.threadlinqs.com/threat/TL-2026-2599 #ThreatIntel #FLATROOF #ROOFDECK #BONZAI
"Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties" published by SentinelOne. #TraderTraitor, #FLATROOF, #ROOFDECK https://www.sentinelone.com/labs/dont-call-us-well-call-your-apis-tradertraitor-backdoors-resurface-on-victim-with-no-crypto-ties