Silver Fox Springs Tax-Themed Attacks on Orgs in India, Russia

Summary

A China-backed APT group tracked as Silver Fox has launched a spear-phishing campaign using over 1,600 socially engineered messages disguised as tax-related communications to target organizations in India and Russia. The attacks deliver previously undocumented malware including the ABCDoor backdoor and ValleyRAT, aiming to establish persistent access across multiple sectors.

Indicators of Compromise

• malware — ABCDoor
• malware — ValleyRAT

Entities