ValleyRAT Backdoor Masked by Signed Adware

patribotics.blog

Lean Right

Factuality

Ownership

Malware is a growing threat in the tech world, and among these threats, ValleyRAT stands out as one of the most sophisticated. Background on the ValleyRAT Threat: The known actor Silver Fox was observed distributing ValleyRAT, a malware disguised as a legitimate Chinese adware application. The malware operates within a trusted process to bypass users who add it, such as… The article ValleyRAT Backdoor: A Hidden Threat in Trusted Adware appeared…

Clubic.com

Factuality

Ownership

QN Wallpaper, a Chinese wallpaper utility, has been hiding ValleyRAT's stolen door in its installer since August. More than 100,000 detections and 1,500 unique victims have been identified in China and India. Hackers are using manual addition of software to exclusions from their antivirus.

unsafe.sh

Factuality

Ownership

The ValleyRAT backdoor is hidden within signed adware, which users can add to their antivirus software's exclusion list.

SempreUPdate

Factuality

Ownership

The backdoor ValleyRAT is at the center of a campaign that shows why the digital signature of an application should not be confused with an absolute security guarantee. According to an analysis published by Kaspersky, the Silver Fox group started distributing the malware through a modified version of QN Wallpaper, a legitimate adware that can be installed under the appearance of common software. The case draws attention because it combines signe…