The threat actor Silver Fox conducted a false flag operation mimicking Russian threat groups to target Chinese organizations. The campaign used SEO poisoning and fake Microsoft Teams installers as lures to distribute ValleyRAT (also known as Winos 4.0) malware. This represents an active malware distribution campaign targeting specific geographic regions through social engineering tactics.