hexastrike.comPublished
Trust the Tunnel, Get the Trojan: Silver Fox Delivers Atlas RAT via Weaponized VPN Installers
By Maurice Fielenbach
Excerpt
Overview of the Silver Fox AtlasCross campaign kill chain, from typosquatted lure domains through the triple-nested Setup Factory installer to fileless AtlasCross RAT deployment.
Executive Summary
A multi-stage remote access trojan campaign is actively targeting Chinese-speaking users through a network of typosquatted domains impersonating trusted software brands. The operation covers VPN clients, encrypted messengers, video conferencing tools, cryptocurrency t…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by hexastrike.com on hexastrike.com.
More from hexastrike.com2
- FLEXRAT – ChilloutVR Lures, Shared Secrets, and an OPSEC Hangoverhexastrike.com · Published 4 Oct
- Cloned, Loaded, and Stolen: How 109 Fake GitHub Repositories Delivered SmartLoader and StealChexastrike.com · Published 18 Apr
On the same topics
- From PostCSS Masquerading to Windows RATJFrog · Published 22 Jun
- Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent TrafficThe Hacker News · Published 19 Oct
- Attackers Target Agents via The Skill Supply Chainzenity.io · Published 6 Aug
- Prompting the Payload: How an npm Supply Chain Attack Delivers the RedC2 AI-Powered Linux ImplantTrend Micro · Added 2 Sep
