Fake Microsoft Edge, Kaspersky and Razer Installers Used to Compromise Windows Systems

Gbhackers •Mayura Kathir • September 2, 2026

An active malware campaign that abuses counterfeit download pages for trusted software brands including Microsoft Edge, Kaspersky and Razer to compromise Windows devices. Victims span healthcare, manufacturing, gaming, technology, logistics, government and education, highlighting the broad appeal of software-download lures. Microsoft has not attributed the activity to a nation-state actor, but the campaign’s infrastructure, payload […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ValleyRAT Backdoor Disguised as Signed Adware The ValleyRAT backdoor has been discovered masquerading as a legitimate adware application, specifically a modified version of QN Wallpaper. This malware, attributed to the threat actor Silver Fox, utilizes DLL sideloading to evade detection and gain control over infected systems. The attackers disable Windows Defender and create persistence through registry modifications. The backdoor can collect sensitive data, including keystrokes and screenshots, while appearing as a harmless installation. Kaspersky's analysis revealed that the adware's advertising functionality is non-operational, serving only as a cover for the malicious payload. Users are advised to avoid adding such software to antivirus exclusions and to be cautious of applications with dubious reputations. The attack highlights the risks associated with seemingly benign software that can be exploited for malicious purposes. 18 sources 65

Extracted Entities

Fake Microsoft Edge, Kaspersky and Razer Installers Used to Compromise Windows Systems

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Industries (6)

Platforms (1)