SEO Manipulation Campaign Distributes Fake Microsoft Teams Installers

First seen 9 Dec 2025, 18:45 UTC • Gbhackers

•24

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

A cyber campaign initiated by the Chinese state-linked APT group Silver Fox is exploiting search engine optimization to distribute a malicious installer disguised as Microsoft Teams. This campaign, active since November 2025, targets organizations by directing users to a fake Microsoft Teams website to download a trojanized application that deploys the ValleyRAT malware.

How this analysis works

Attack Flow

Continue Reading

Urgent CISA Directive: Patch Critical Ivanti EPMM Vulnerability CVE-2026-1340 by April 11 PATCHCORD Malware Targets Afghan Telecom and South Asian Infrastructure Silver Fox Cyber Campaign Exploits Fake Tax Alerts to Spread Malware Silver Fox Targets Japanese Firms with Spearphishing During Tax Season Silver Fox APT Campaign Distributes ValleyRAT via Fake Telegram Installer Silver Fox APT Deploys ValleyRAT via Fake Installers Targeting China

SEO Manipulation Campaign Distributes Fake Microsoft Teams Installers

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading