Chinese adware hides ValleyRAT malware
Fake wallpaper apps from China secretly install ValleyRAT malware, which lets attackers spy on your phone or steal data. Kaspersky found this hidden in apps that look like official wallpaper packs.
- Report priority
- Medium
How it works
Attackers trick users into installing fake wallpaper apps that look real, but secretly install ValleyRAT malware when opened.
What to do
Check if you installed any wallpaper apps from Chinese stores or unknown sources in the last month.
Uninstall any suspicious wallpaper apps immediately and scan your phone with a trusted antivirus like Kaspersky.
Technical details
You download what looks like an official wallpaper app from a Chinese app store. When you open it, it installs ValleyRAT malware in the background. The attacker now sees your messages, photos, and location without you knowing.
Kaspersky uncovered a ValleyRAT backdoor adware campaign using signed wallpaper apps to drop malware. Learn how to protect your systems.