Silver Fox Uses Fake Microsoft Teams Installer to Spread ValleyRAT Malware in China

The threat actor Silver Fox is using a fake Microsoft Teams installer as part of an SEO poisoning campaign to spread ValleyRAT malware in China, employing tactics to mislead attribution. This malware allows for remote control, data exfiltration, and persistence, with recent attacks also utilizing trojanized Telegram installers and vulnerable driver techniques.