Suspected TraderTraitor Group Uses Trojanized Terraform Provider to Deliver Cross-Platform Malware
From the source: Zscaler ThreatLabz
In July 2026, Zscaler ThreatLabz uncovered a campaign linked to TraderTraitor (also tracked as Jade Sleet, UNC4899, Pressure Chollima, and Slow Pisces), an advanced persistent threat actor backed by the North Korean government that has targeted the cryptocurrency industry for years. This campaign also significantly overlaps with the previously reported KelpDAO incident, the analysis…
Read the full story on Zscaler ThreatLabzAsk the square
The story is what was announced. If it raises a question for your team, ask the people who run this technology day to day. Your post links back to this story, so the next reader finds it too.
Recent threads in Security
Which security investments are you prioritising for FY27?
Identity, cloud security posture, AI security, SOC automation, resilience? Share your top two and why.
How are you securing employee use of generative AI tools?
Blocking, allow-listing, DLP, enterprise licences, policy and training: what combination is working in practice?
Something wrong or out of date? Suggest a correction. We reply within 5 business days.
More from Zscaler
Recent updates from Zscaler, so you can tell whether this is a one-off or part of a pattern.
More in Security
What other companies in Security are doing. The category page shows who’s active, side by side.
