VALLEYRAT BACKDOOR DISGUISES ITSELF AS ADWARE

Summary from the TLDR InfoSec newsletter

Kaspersky found ValleyRAT hiding inside a modified build of the Chinese adware QN Wallpaper, sideloading a malicious libcef.dll through the signed QnWallpaper.exe to gain a trusted parent process that users routinely whitelist.