Threat actor
Void Arachne
Tracked by CyberSIXT since 31 Mar · last activity 18 Sep
Also Silver FoxMalpedia
- CVEs linked · all time
- 2
- in CISA KEV · all time
- 2
- articles · all time
- 13
One article in the last 45 daysThe latest: dti.domaintools.com, Fri 18 Sep, 20:58 UTC.See the full timeline
CVEs
2 CVEsCVE-2026-48939iCagenda Unrestricted Upload of File with Dangerous Type VulnerabilityCVSS10.0CriticalExploited20%EPSS6articles
CVE-2026-56291Balbooa Forms Unrestricted Upload of File with Dangerous Type VulnerabilityCVSS10.0CriticalExploited15%EPSS6articles
- DomainTools Uncovers Russia’s Secret Cyber Training Programmesdti.domaintools.com
- Cambodia Phishing Campaign Delivers SparkRAT via PNG and BYOVDSecurityOnline
- ValleyRAT malware hides in fake wallpaper app to spy on usersSecurity Affairs
- ValleyRAT backdoor hides in fake signed installers targeting AsiaSecurityOnline
- Silver Fox malware network adapts, uses cloud to launch attacksdti.domaintools.com
- SilverFox targets Japanese maker with ValleyRAT via DLL sideloadSecurity Affairs
- SilverFox uses three driver BYOVD with ValleyRAT on Japan makerThe Hacker News
- Silver Fox uses SEO tricks to drop MODBEACON trojan via bugsSecurityOnline
- ValleyRAT spreads via fake VLC installers targeting Asian usersSecurityOnline
- Silver Fox Uses Tax Scams to Deploy ABCDoor and ValleyRATDark Reading
- Silver Fox Tax Phishing Hits Russia, India with ABCDoorThe Hacker News
- Silver Fox tax phishing campaign spreads ValleyRAT and ABCDoorSecurelist
- Silver Fox Expands Asia Cyber Campaign with AtlasCross RAT and Fake DomainsThe Hacker News · first in our coverage