Fake Google Chrome Sites Distribute ValleyRAT Malware via DLL Hijacking

Feb 6, 2025

Bogus websites advertising Google Chrome have been used to distribute malicious installers for a remote access trojan called ValleyRAT.
The malware, first detected in 2023, is attributed to a threat actor tracked as Silver Fox, with prior attack campaigns primarily targeting Chinese-speaking regions like Hong Kong, Taiwan, and Mainland China.
“This actor has increasingly targeted key roles

Get Free Report & Network Analysis

Please check your email for the free report.