Hackers Leverages Telegram, WinSCP, Google Chrome, and Microsoft Teams to Deploy ValleyRat

Cybersecuritynews •Tushar Subhra Dutta • December 2, 2025

A new malware campaign has emerged that exploits the trust users place in popular applications. Threat actors are distributing trojanized installers for Telegram, WinSCP, Google Chrome, and Microsoft Teams to deploy ValleyRat, a remote access trojan designed for long-term system compromise. The campaign has been attributed to the China-aligned APT group known as Silver Fox, […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Silver Fox APT Group Deploys ValleyRat via Trojans in Popular Apps A malware campaign has been identified where the Silver Fox APT group is distributing trojanized installers for popular applications such as Telegram, WinSCP, Google Chrome, and Microsoft Teams. This campaign delivers ValleyRat, a remote access trojan aimed at long-term system compromise, exploiting user trust in these widely used applications. 3 sources 38

Extracted Entities

Platforms (1)

Tools (3)

Google Chrome Microsoft Teams WinSCP

Hackers Leverages Telegram, WinSCP, Google Chrome, and Microsoft Teams to Deploy ValleyRat

The full story

Extracted Entities

APT Groups (1)

Attack Types (1)

Countries (1)

Malware (1)

Platforms (1)

Tools (3)