A fake LINE installer that spreads the ValleyRAT malware which targets Chinese-speaking users and deploys advanced evasion tactics. First spotted in early 2025, it mimics popular apps like LINE and VPN tools. The malware downloads ValleyRAT, linked to the Silver Fox APT group, for credential theft and persistence. Cybereason uncovered new features, including rare PoolParty […] The post ValleyRAT Campaign Uses Trojanized LINE Setup To Harvest Credentials appeared first on Cyber Security News.