ValleyRat Malware Delivered Through Abuse of Telegram, Chrome, Teams, and WinSCP

Cyberpress • December 2, 2025

Share: View original

ValleyRat malware - A newly identified malware campaign linked to the China-aligned group Silver Fox has been caught deploying the ValleyRat.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Silver Fox APT Group Deploys ValleyRat via Trojans in Popular Apps A malware campaign has been identified where the Silver Fox APT group is distributing trojanized installers for popular applications such as Telegram, WinSCP, Google Chrome, and Microsoft Teams. This campaign delivers ValleyRat, a remote access trojan aimed at long-term system compromise, exploiting user trust in these widely used applications. 3 sources 38

Extracted Entities

APT Groups (1)

Attack Types (1)

Malware (1)

Platforms (1)

Tools (3)

Chrome Teams WinSCP