Silver Fox Uses Fake Microsoft Teams Installer to Spread ValleyRAT Malware in China

The Silver Fox threat actor conducted a false flag operation mimicking Russian threat groups to target organizations in China. The campaign used SEO poisoning with fake Microsoft Teams installers as lures to distribute ValleyRAT (Winos 4.0) malware. This represents an active malware distribution campaign targeting Chinese organizations through social engineering tactics.