> TritonInfoSec News
Home / Sep 01, 2026 / Story
0
#7 The Hacker News general August 31, 2026 at 12:14 UTC

ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions

By [email protected] (The Hacker News)

AI Summary

The Silver Fox threat actor is distributing the ValleyRAT backdoor disguised as QN Wallpaper, a signed Chinese desktop wallpaper application, exploiting users who add the software to antivirus exclusion lists. Kaspersky researchers identified the campaign, noting the malware runs under a trusted, signed process specifically to evade endpoint detection — a technique that challenges traditional AV-based defenses.

Read full article → https://thehackernews.com/2026/08/valleyrat-backdo…

Relevance score: 78.0/100

# More from September 01

  1. 1
    McKesson Confirms Data Breach as Attacker Deadline Looms SecurityWeek
  2. 2
    Berlin confirms data theft after Rhysida ransomware attack claims BleepingComputer
  3. 3
    China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs The Hacker News
  4. 4
    More Details Emerge on Exploited PaperCut Vulnerabilities SecurityWeek
  5. 5
    Microsoft warns of TerminalFix attacks deploying reverse tunnels BleepingComputer
  6. 6
    ServiceNow Patches 3 Critical Code Injection Vulnerabilities SecurityWeek
  7. 8
    Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets The Hacker News
  8. 9
    Critical Ruby on Rails Vulnerability in Attackers’ Crosshairs SecurityWeek
  9. 10
    DoJ Corrects China Hacking Claim, Says U.S. Agencies Were Targets, Not Victims The Hacker News