The Telegram messaging app Trojan installers are used to deploy the Windows-based Purple Fox backdoor to compromised systems. That’s according to new research published by Minerva Labs, which describes the attack as different from intruders that typically exploit legitimate software to release malicious payloads. “This threat actor was able to keep most of the attack under the radar by breaking the attack down into several small files, most of which had very low detection rates by the [antivirus] engines, the last step leading Purple Fox rootkit infection, said researcher Natalie Zargarov.First…