Hexastrike Cybersecurity traced a multistage AtlasCross RAT campaign using look-alike brands to deliver malware, linked to Silver Fox APT. The operation exposed 13 network IoCs and extensive infrastructure. #AtlasCrossRAT #SilverFoxAPT #China
An Analysis of the AtlasCross RAT Network IoCs
Hexastrike Cybersecurity analyzed a multistage AtlasCross RAT campaign that used look-alike domains impersonating trusted software brands such as Surfshark VPN, Signal, Telegram, Zoom, and Microsoft Teams. The activity was attributed to the Silver Fox APT group and involved 13 network IoCs, including 12 domains and one IP address, with extensive evidence of connected infrastructure and potential victims. #AtlasCrossRAT #SilverFoxAPT #SurfsharkVPN #MicrosoftTeams #Telegram #Zoom
www.hendryadrian.com
May 26, 2026 at 7:30 PM
Hexastrike Cybersecurity traced a multistage AtlasCross RAT campaign using look-alike brands to deliver malware, linked to Silver Fox APT. The operation exposed 13 network IoCs and extensive infrastructure. #AtlasCrossRAT #SilverFoxAPT #China