A trojanized Terraform provider is delivering FLATROOF and ROOFDECK malware to macOS, Linux and Windows systems while targeting developer credentials, browser data and cryptocurrency wallets.
SentinelOne researchers linked North Korea-aligned TraderTraitor, also tracked as Jade Sleet, to an Indian IT services provider after finding FLATROOF and ROOFDECK macOS backdoors on a DevOps engineer’s Apple Silicon Mac.
Uday Patil Sep 21, 2026 8 min read
Type at least 2 characters to search articles live...
