Threat actors have compromised the KeePass password manager by distributing trojanized installers embedded with a custom malware loader named KeeLoader. The campaign leverages malvertising and trusted code-signing certificates to deliver malware.