Silver Fox Deploys ABCDoor Malware via Tax-Themed Phishing in India and Russia
Silver Fox, a cybercrime outfit based in China, has been connected to a new campaign that uses a new malware named ABCDoor to target companies in Russia and India.
Phishing emails that imitated correspondence from the Indian Income Tax Department were used in the operation in December 2025. In January 2026, a similar effort was launched against Russian organizations.
The format of both waves was almost the same: phishing emails were presented as official tax audit warnings or asked recipients to download an archive that contained a "list of tax violations," according to Kaspersky. "A modified Rust-based loader that was taken from a public repository was contained within the archive. The popular ValleyRAT backdoor would be downloaded and run by this loader.
Organizations in the re...

