ValleyRAT Backdoor Found Disguised in Legitimate Signed Software

Threat actor Silver Fox is distributing the ValleyRAT backdoor disguised as legitimate signed Chinese adware, leveraging tools like QN Wallpaper to bypass…

Audit antivirus exclusion lists across your infrastructure to identify unnecessary applications. Question the presence of utilities like wallpaper tools on corporate endpoints, especially if they have exclusion permissions. Strengthen pre-deployment vetting of software before adding it to whitelists, regardless of apparent legitimacy.