Chinese cybercrime group SilverFox has launched a sophisticated attack against a Japanese industrial manufacturing organization using a three-driver Bring Your Own Vulnerable Driver (BYOVD) chain to deploy ValleyRAT malware. The campaign demonstrates advanced techniques combining new vulnerable driver exploitation with legitimate tool abuse to establish persistent remote access to compromised syst
The Chinese cybercrime group known as Silver Fox has been observed using new drivers as part of bring your own vulnerable driver (BYOVD) attacks targeting a Japanese organization in the industrial manufacturing sector to ultimately deliver ValleyRAT (aka Winos 4.0) for persistent remote access. "In this campaign, the group combines new vulnerable-driver abuse, newly observed abuse of legitimate
Originally published at thehackernews.com
60-minute technical evaluation, no obligation. We'll map the ideas in this article to your environment.
