Bogus software installers leveraged in novel Chinese malware attack SecurityWeek reports that Chinese advanced persistent threat group Silver Fox has been using counterfeit installers for widely used software, such as WPS Office, DeepSeek, and Sogou, to facilitate compromise with Sainbox RAT, a variant of Gh0stRAT, and the Hidden rootkit.