Silver Fox, a cybercrime outfit based in China, has been connected to a new campaign that uses a new malware named ABCDoor to target companies in Russia and India.
Phishing emails that imitated correspondence from the Indian Income Tax Department were used in the operation in December 2025. In January 2026, a similar effort was launched against Russian organizations.
The format of both waves was almost the same: phishing emails were presented as official tax audit warnings or asked recipients to download an archive that contained a “list of tax violations,” according to Kaspersky. “A modified Rust-based loader that was taken from a public repository was contained within the archive. The popular ValleyRAT backdoor would be downloaded and run by this loader.
Organizations in the retail, transportation, consultancy, and industrial sectors are thought to have been affected by the campaign. Between early January and early February read more about Silver Fox Deploys ABCDoor Malware via Tax-Themed Phishing in India and Russia.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.