Silver Fox APT exploits vulnerable drivers to bypass security on Windows 10/11 systems. Stay vigilant and update your defenses. #CyberSecurity #APT #WindowsSecurity #SilverFoxAPT Link: thedailytechfeed.com/silver-fox-a...
August 29, 2025 at 4:55 PM
Silver Fox APT exploits vulnerable drivers to bypass security on Windows 10/11 systems. Stay vigilant and update your defenses. #CyberSecurity #APT #WindowsSecurity #SilverFoxAPT Link: thedailytechfeed.com/silver-fox-a...
Hexastrike Cybersecurity traced a multistage AtlasCross RAT campaign using look-alike brands to deliver malware, linked to Silver Fox APT. The operation exposed 13 network IoCs and extensive infrastructure. #AtlasCrossRAT #SilverFoxAPT #China
An Analysis of the AtlasCross RAT Network IoCs
Hexastrike Cybersecurity analyzed a multistage AtlasCross RAT campaign that used look-alike domains impersonating trusted software brands such as Surfshark VPN, Signal, Telegram, Zoom, and Microsoft Teams. The activity was attributed to the Silver Fox APT group and involved 13 network IoCs, including 12 domains and one IP address, with extensive evidence of connected infrastructure and potential victims. #AtlasCrossRAT #SilverFoxAPT #SurfsharkVPN #MicrosoftTeams #Telegram #Zoom
www.hendryadrian.com
May 26, 2026 at 7:30 PM
Hexastrike Cybersecurity traced a multistage AtlasCross RAT campaign using look-alike brands to deliver malware, linked to Silver Fox APT. The operation exposed 13 network IoCs and extensive infrastructure. #AtlasCrossRAT #SilverFoxAPT #China
Fake Microsoft Teams download sites pushed a trojanized ZIP with an NSIS installer and DLL sideloading via GameBox.exe, delivering ValleyRAT, evading Defender, stealing clipboard and log data, and linking to C2 103.215.77.17. #ValleyRAT #GameBox
Fake Microsoft Teams Campaign Delivers ValleyRAT via NSIS Installer and DLL Sideloading
Fake Microsoft Teams download sites were used to distribute a trojanized ZIP archive that installs a multistage loader chain ending in ValleyRAT. The campaign abuses GameBox.exe for DLL sideloading, evades Windows Defender, steals clipboard and log data, and communicates with a C2 server at 103.215.77.17. #ValleyRAT #GameBox.exe #SilverFoxAPT #MicrosoftTeams
www.hendryadrian.com
May 20, 2026 at 10:15 AM
Fake Microsoft Teams download sites pushed a trojanized ZIP with an NSIS installer and DLL sideloading via GameBox.exe, delivering ValleyRAT, evading Defender, stealing clipboard and log data, and linking to C2 103.215.77.17. #ValleyRAT #GameBox
Alert: Silver Fox APT targets Japanese businesses with tax-themed phishing during tax season. Stay vigilant! #CyberSecurity #Phishing #Japan #SilverFoxAPT Link: thedailytechfeed.com/silver-fox-t...
March 29, 2026 at 4:24 PM
Alert: Silver Fox APT targets Japanese businesses with tax-themed phishing during tax season. Stay vigilant! #CyberSecurity #Phishing #Japan #SilverFoxAPT Link: thedailytechfeed.com/silver-fox-t...