Skip to content
Chinese Hackers Use Fake Teams Downloads to Shift Blame to Russia

Chinese Hackers Use Fake Teams Downloads to Shift Blame to Russia

First seen 18 Dec 2025, 10:54 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

A Chinese state-linked hacking group, Silver Fox (Void Arachne), is conducting a campaign that mimics Microsoft Teams downloads to mislead users into believing Russian attackers are responsible. This operation targets Chinese-speaking individuals, particularly those working in Western organizations operating in China, utilizing a modified version of the ValleyRAT remote access trojan.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 217d ago How this analysis works

More articles in this cluster (3)

Following this threat?

Track Silver Fox, ValleyRat and Alibaba Cloud in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed