Silver Fox group hackers churn Asia again

Silver Fox group hackers once again churn Asia. With ABCDoor malware sent via email, Phishing aims to suck victim data.

Phishing methods of deception, usually forging messages or emails to look credible with links or fake files to download, can be called simple, but it works, and this time it has been used again.

According to a report by the website, SCWorld mentions the detection of a malware distribution campaign of the type of open back door of the system, or Backdoor, with the name ABCDoor, by phishing deception, which took place in India and Russia during December 2025. The target of the attack will focus on business groups such as retail, consulting, industry, and transportation. The attack will be used to create e-mails claiming to be from various revenue agencies or tax agencies, claiming that the victim has violated tax laws with a Decoy file in a PDF file format. Inside it will be a link that leads to the download of a zip or Rar compressed file from a hacker's server, which was reviewed by a research team from the famous anti-Virus developer Kaspersky. That the campaign sent 1,600 Phishing emails.

The file contains a loader for loading ShellCode called RustSL. This leads to decryption, a payload file called ValleyRAT, a malware type that remotely controls the machine, or a RAT (Remote Access Trojan). In addition, the malware also performs many functions, such as Geofencing, monitoring the environment in which the malware runs (Environmental Check), and establishing system persistence, or Persistence with a method called Phantom Persistence.

The ValleyRAT malware, after starting on the victim's machine, will immediately contact the C2 or Command and Control server to use the Module extension that acts as the loader of the ABCDoor malware to download and install the malware. The malware will act in data theft (Exfiltration) and Remote Control.

# Trending # Lemon 8 Howtoo # lemon 8 diary # silverfox # freedomhack