Silver Fox Uses Fake Microsoft Teams Installer to Spread ValleyRAT Malware in China

Silver Fox Uses Fake Microsoft Teams Installer to Spread ValleyRAT Malware in China

Silver Fox is conducting sophisticated false flag operations and SEO poisoning campaigns to distribute ValleyRAT malware, targeting Chinese-speaking and Western organizations operating in China. The campaign employs deceptive techniques using Microsoft Teams and trojanized installers to evade detection and maintain long-term access. #SilverFox #ValleyRAT

Keypoints

  • Silver Fox is launching false flag operations to mimic Russian threat groups.
  • The SEO poisoning campaign uses Microsoft Teams to infect users with ValleyRAT malware.
  • The malware network includes trojanized installers, privilege escalation, and driver manipulation techniques.
  • ValleyRAT allows remote control, data exfiltration, and persistence within compromised systems.
  • The campaigns target both Chinese-speaking users and Western organizations operating in China for financial and intelligence gains.

Read More: https://thehackernews.com/2025/12/silver-fox-uses-fake-microsoft-teams.html