Silver Fox Targets Indian Users With Tax-Themed Emails Delivering ValleyRAT Malware
The threat actor Silver Fox has shifted its attention to India, distributing a modular remote access trojan known as ValleyRAT (also known as Winos 4.0) using phishing attacks that use baits with an income tax theme.
According to an investigation released last week by CloudSEK experts Prajwal Awasthi and Koushik Pal, this sophisticated attack uses a complicated death chain that includes DLL hijacking and the modular Valley RAT to guarantee persistence.
Silver Fox is the name given to an aggressive cybercrime group from China that has been active since 2022 and is also tracked as SwimSnake, The Great Thief of Valley (or Valley Thief), UTG-Q-1000, and Void Arachne.
It is one of the few hacking groups having a multifaceted approach to its intrusion activity because of its history of...