Silver Fox
Coverage of Silver Fox in the Nexus archive.
- New MODBEACON RAT Uses gRPC Streaming for Encrypted C2 Traffic
The China-linked cybercrime group Silver Fox has developed a new Rust-based remote access trojan (RAR) called MODBEACON, which uses gRPC streaming for encrypted command-and-control traffic. QiAnXin attributes the threat to a low-sophistication, high-activity operation spreading malware through counterfeit installers and SEO poisoning techniques.
- Silver Fox Deploys ABCDoor Malware via Tax-Themed Phishing in India and Russia
The China-based cybercrime group Silver Fox has been linked to a new campaign targeting organizations in Russia and India with a new malware called ABCDoor. The activity involved using phishing emails that mimic correspondence from the Income Tax Department of India. The campaign also targeted Russian entities.
- Silver Fox Springs Tax-Themed Attacks on Orgs in India, Russia
The China-backed advanced persistent threat group Silver Fox has launched tax-themed attacks on organizations in India and Russia, targeting various sectors with over 1,600 socially engineered messages to deliver malware. The attacks aim to deliver the previously undocumented ABCDoor backdoor, ValleyRAT, and other malware. This campaign highlights increased cyber threats from APT groups.