Silver Fox Expands Asia Cyber Campaign with AtlasCross RAT and Fake Domains

Summary

A Chinese-speaking threat actor known as Silver Fox is conducting an active campaign delivering a previously undocumented remote access trojan (RAT) called AtlasCross through typosquatted domains impersonating legitimate software brands. The operation targets users of VPNs, encrypted messengers, video conferencing tools, cryptocurrency trackers, and e-commerce applications across eleven confirmed malicious domains.

Indicators of Compromise

• malware — AtlasCross RAT
• malware — Silver Fox