OTX Threat: Suspected TraderTraitor Group Uses Trojanized Terraform Provider to Deliver Cross-Platform Malware

In July 2026, Zscaler ThreatLabz uncovered a sophisticated campaign utilizing a trojanized Terraform provider to deliver cross-platform malware targeting cryptocurrency and Web3 developers. The attack begins with a malicious Terraform provider that downloads a Bash loader from a HashiCorp-themed lookalike domain, which then selects and deploys payloads tailored to the victim's operating system (ma Sectors: Technology, Finance