Bogus websites advertising Google Chrome have been used to distribute malicious installers for a remote access trojan called ValleyRAT.
The malware, first detected in 2023, is attributed to a threat actor tracked as Silver Fox, with prior attack campaigns primarily targeting Chinese-speaking regions like Hong Kong, Taiwan, and Mainland China.
“This actor has increasingly targeted key rolesRead More

Fake Google Chrome Sites Distribute ValleyRAT Malware via DLL Hijacking [email protected] (The Hacker News)
by
Tags: