Tag: antivirus impersonation

1 Attack Reports | 0 Vulnerabilities

Attack reports

Fake Huorong security site infects users with ValleyRAT

A sophisticated campaign by the Silver Fox APT group has been discovered using a fake version of the popular Chinese antivirus Huorong Security to distribute ValleyRAT, a Remote Access Trojan. The attackers created a convincing lookalike website with a typosquatted domain to trick users into downlo…
apt
typosquatting
china
dll sideloading
valleyrat
remote access trojan
2026-02-23
antivirus impersonation
huorong security
winos4.0
Published: February 23, 2026
Downloadable IOCs: 7
Click here to see more Attack Reports