Beware the Fox: Fake Software Installers Unleash RATs and Rootkits!
Fake installers on Chinese websites are wielding Sainbox RAT and Hidden rootkit to infect systems, Netskope reports. These impostor installers, mimicking popular software like WPS Office, deliver malware when executed. The rootkit ensures stealth, hiding processes and files. It’s suspected the China-linked Silver Fox group is behind this digital masquerade.
Hot Take:
In a move that’s more predictable than a plot twist in a Hallmark movie, cybercriminals are up to their old tricks again—this time, with a side of Kung Pao chicken. These digital bandits are disguising malicious software as legitimate Chinese software, proving once again that when it comes to cybersecurity, if it looks too good to be true, it probably is.
Key Points:
- Fake installers for popular Chinese software are spreading malware.
- The campaign uses a Gh0stRAT variant called Sainbox RAT and the Hidden rootkit.
- Malicious installers mimic legitimate sites but download from different URLs.
- China-linked Silver Fox hacking group is behind this campaign.
- The rootkit hides malicious activity and protects itself from detection.
Already a member? Log in here