Threat Actors Poisoning SEO Results to Attack Organizations With Fake Microsoft Teams Installer

Cybersecuritynews •Tushar Subhra Dutta • December 9, 2025

A sophisticated cyber campaign is exploiting engine optimization (SEO) to distribute a malicious installer disguised as Microsoft Teams, targeting unsuspecting organizations. This campaign, active since November 2025, uses a fake Microsoft Teams website to lure users into downloading a trojanized application, which then deploys the “ValleyRAT” malware. This malware gives attackers remote control over […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SEO Manipulation Campaign Distributes Fake Microsoft Teams Installers A cyber campaign initiated by the Chinese state-linked APT group Silver Fox is exploiting search engine optimization to distribute a malicious installer disguised as Microsoft Teams. This campaign, active since November 2025, targets organizations by directing users to a fake Microsoft Teams website to download a trojanized application that deploys the ValleyRAT malware. 3 sources 24

Extracted Entities

Threat Actors Poisoning SEO Results to Attack Organizations With Fake Microsoft Teams Installer

The full story

Extracted Entities

Attack Types (2)

Malware (1)

Tools (1)