SecurityThe Hacker Newsabout 2 hours ago
Fake Installers Disable Windows Update and Defender
1 min read
A malware campaign uses fake vendor sites to distribute malicious installers, targeting Chinese-speaking users and China-based multinational operations. The malware disables Windows Update services, weakens Microsoft Defender via exclusions, and establishes C2 on non-standard ports. Microsoft attributes the activity to Chinese threat cluster Silver Fox, which also deploys Gh0st RAT and ValleyRAT.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyMicrosoft
Summary by ByteBrief
