TLDR Tech / InfoSec
ValleyRAT Backdoor Disguises Itself as Adware
Kaspersky found ValleyRAT hiding inside a modified build of the Chinese adware QN Wallpaper, sideloading a malicious libcef.dll through the signed QnWallpaper.exe to gain a trusted parent process that users routinely whitelist.
Read the full story