AI and Tech Summaries - AI Weekly Malaysia

Summaries

Short AI and tech summaries with source links, signal scores, and why each update matters for builders, founders, and Malaysian tech workers.

Window

Today Yesterday This week Last week This month Last month All time

Showing 1-1 of 1 results

Date	Provider	Score	Summary
31 Aug 2026, 8:14 PM	The Hacker News	3.0	ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions The Silver Fox threat group is distributing the ValleyRAT backdoor (Winos 4.0) bundled inside QN Wallpaper, a legitimate signed Chinese adware app, using DLL sideloading to run malicious code inside a trusted process. The installer disables Windows Defender via the DisableAntiSpyware registry key, adds itself to autorun, escalates privileges with runas, and marks its process as critical so termination triggers a BSOD. Kaspersky published IoCs including file hashes and C2 servers (103.45.66.18:441-443, 192.253.225.173:6666/8888). Why: This is a consumer-targeted adware-to-RAT campaign with no direct bearing on AI tooling, developer infrastructure, or SaaS workflows this audience ships. The only actionable detail for builders is the DLL sideloading pattern (signed exe + planted libcef.dll) worth noting if you ship desktop installers or maintain endpoint exclusion policies for your own software. security malware dll-sideloading endpoint-protection

Date

Provider

Score

Summary

31 Aug 2026, 8:14 PM

The Hacker News

3.0

ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions

The Silver Fox threat group is distributing the ValleyRAT backdoor (Winos 4.0) bundled inside QN Wallpaper, a legitimate signed Chinese adware app, using DLL sideloading to run malicious code inside a trusted process. The installer disables Windows Defender via the DisableAntiSpyware registry key, adds itself to autorun, escalates privileges with runas, and marks its process as critical so termination triggers a BSOD. Kaspersky published IoCs including file hashes and C2 servers (103.45.66.18:441-443, 192.253.225.173:6666/8888).

Why: This is a consumer-targeted adware-to-RAT campaign with no direct bearing on AI tooling, developer infrastructure, or SaaS workflows this audience ships. The only actionable detail for builders is the DLL sideloading pattern (signed exe + planted libcef.dll) worth noting if you ship desktop installers or maintain endpoint exclusion policies for your own software.