Skip to content
Threat Feed

Actor

Silver Fox

4 briefs RSS
high threat

Silver Fox Campaign Distributes Malware via Spoofed Software Websites

The threat cluster Silver Fox is targeting users with high-fidelity clone websites to distribute malicious installers that disable security features and deploy backdoors like ValleyRAT and Gh0st RAT.

Silver Fox silver-fox malware defense-evasion windows phishing
2r 2t 15i
high threat

Silver Fox Counterfeit Installer Campaign

An active campaign impersonates legitimate software vendors via look-alike websites to distribute dynamically generated malicious installers that evade detection and establish persistent access.

Silver Fox phishing malware initial-access silver-fox china
3t 2i
high threat

ValleyRAT Backdoor Distributed via Signed Adware

The threat actor Silver Fox is distributing the ValleyRAT backdoor disguised as a signed QN Wallpaper adware application to leverage user-applied antivirus exclusions.

Silver Fox backdoor malware dll-sideloading
2r 2t 6i
high threat

Silver Fox Spearphishing Campaign Targeting Japanese Firms During Tax Season

The Silver Fox threat actor is conducting a targeted spearphishing campaign against Japanese manufacturers and other businesses, exploiting the annual tax filing and organizational change season by sending emails containing malicious attachments that deploy ValleyRAT, leading to remote access, data theft, and persistence.

Silver Fox silverfox spearphishing valleyrat japan taxseason remoteaccesstrojan
2r 5t