ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions

Silver Fox threat actors distribute ValleyRAT disguised as signed adware, QN Wallpaper, a genuine Chinese desktop-wallpaper tool. The malware runs under a trusted process, slipping past antivirus exclusions. Kaspersky reported the campaign, highlighting how signed applications can be abused to evade security defenses.