Silver Fox APT Deploys ValleyRAT via Fake Installers Targeting China
First seen 5 Dec 2025, 02:43 UTC
•
•82% similarity
•50
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
The Silver Fox APT group has launched a campaign targeting users in China by distributing malware through fake installers of popular applications, including Microsoft Teams. The malware, known as ValleyRAT, employs advanced evasion techniques to compromise systems and maintain persistent access. This operation showcases sophisticated methods such as kernel-level driver abuse and multi-stage obfuscation.
ThreatCluster AI