{"version":"1.0","type":"rich","provider_name":"RootPwn","provider_url":"https://rootpwn.me","title":"ValleyRAT Backdoor Distributed via Signed Adware and DLL Sideloading","description":"Threat actors are distributing the ValleyRAT backdoor disguised as a signed adware application called QN Wallpaper. The campaign uses DLL sideloading to execute malicious payloads while distracting users by installing legitimate software like Google Chrome or DingTalk. SecOps and system administrato","url":"https://rootpwn.me/news/valleyrat-backdoor-distributed-via-signed-adware-and-dll-sideloading","thumbnail_url":"https://rootpwn.me/images/dd0f0e3e119a4b1e9d6b163164c7897e.jpg","thumbnail_width":1600,"thumbnail_height":900}