A malicious Telegram instant-messaging app installer scurries past a slew of antivirus engines to deliver Purple Fox malware. The attack evades detection by separating the attack into bite-sized morsels that fly under the radar. Purple Fox is a Purple Fox rootkit version using the same attack chain, possibly distributed via email or phishing sites. Multiple malicious installers were delivering the same Purple Fox Rootkit version of the same malware. At the time of investigation, the attackers skipped over that crutch by empowering the malware with the ability to brute force force its way into its own way into victims systems.”]
Source: https://threatpost.com/purple-fox-rootkit-telegram-installers/177330/