Silver Fox exploited a Microsoft-signed WatchDog driver in May 2025 to bypass defenses, deploy ValleyRAT, and enable fraud.

Although signed by Microsoft and not previously listed as vulnerable, the driver was abused to terminate processes linked to ...