type: entity · created: 2026-07-11 · updated: 2026-07-11 · tags: [cybercrime-group, rat, loader] · confidence: medium · affected_sectors: [technology, education, government] · au_impact: false
Silver Fox
Silver Fox is a China-linked cybercrime group attributed by Qianxin Threat Intelligence as the operator of the Modbeacon Rat, a Rust-based remote access trojan (RAT). The group targets technology firms, educational institutions, and state-owned enterprises across Asia.
Modus Operandi
- Distributes malware via counterfeit software installers using SEO poisoning
- Targets primarily across Asian markets
- Uses Modbeacon Rat with gRPC streaming for encrypted C2 communication
- Infrastructure hosted on Amazon and Cloudflare CDN (raw/digests/Cyber-Digest-2026-07-11)
Associated Malware
- Modbeacon Rat — Rust-based RAT with gRPC streaming C2
Related Pages
- Uat 7810 — Another China-linked APT
- Modbeacon Rat — Primary tool used by this group