A cybersecurity group has reported that a threat actor known as Silver Fox is distributing a backdoor malware called ValleyRAT by disguising it as a legitimate signed adware application. This adware, specifically a desktop wallpaper tool named QN Wallpaper, is being added to users' antivirus exclusions, allowing the malware to operate undetected. The tactic of embedding malware within trusted applications poses a significant risk to users, as they may unknowingly grant access to their systems. Kaspersky, a Russian cybersecurity vendor, identified this method, which raises concerns about the security of software that users might consider harmless. This incident serves as a reminder for users to be cautious about what they exclude from their antivirus protections.