ValleyRAT Backdoor Hides in Signed Adware

Silver Fox distributes the ValleyRAT backdoor disguised as signed Chinese adware, QN Wallpaper, running malware under a trusted process. Kaspersky reports attackers exploit users who add such software to antivirus exclusions, allowing the backdoor to slip past defenses.