At a glance Details Malware family ValleyRAT (Remote Access Trojan) Threat actor Often linked to SilverFox; attribution disputed and unconfirmed Targets Japanese and Chinese-speaking users, includ…

At a Glance Malware type Native Messaging backdoor with a malicious Chrome extension Threat actor Unattributed Targets / victims Italian-language email recipients Delivery vector Phishing email po…

At a Glance Malware family BoryptGrab-lineage in-memory infostealer Threat actor Unattributed; financially motivated, likely Russian-speaking Targets Opportunistic Windows users across sectors Del…

At a glance Actor / group Suspected Chinese-speaking APT group (low confidence) Activity type Cyberespionage using malicious ViPNet update modules Targets / victims Large Russian government, energ…

TL;DR A security researcher has published full details and proof-of-concept code for a Foxit PDF Reader vulnerability. Tracked as CVE-2026-57239, the flaw lets a local, unprivileged user gain NT A…

At a glance Threat actor Unnamed group with links to East Asia (moderate-to-high confidence) Activity type Targeted intrusion and suspected espionage; DLL side-loading and Telegram C2 Targets / vi…

At a Glance Actor or group JadeProx, a China-nexus cluster named by Group-IB; no known group named Activity type Espionage-style intrusions, phishing, credential harvesting, tunnelling Targets A V…

An ordinary email attachment can serve as the perilous gateway to a sophisticated attack chain when a meticulously crafted toolkit lurks behind a seemingly benign document. Recently, analysts at 3…

At a Glance Actor / group SilverFox (Silver Fox), a China-aligned APT tracked since about 2022 Activity type Targeted malware campaign: phishing, DLL sideloading, and BYOVD delivering ValleyRAT Ta…

Even a seemingly mundane invoice can initiate a devastatingly complex infection chain. Recently, the notorious SilverFox threat actor orchestrated this precise deceptive scheme against a prominent…

At a glance Field Detail Malware family OctLurk (plugin-based backdoor); SilkLurk (plugin-based backdoor); LurkProxy (network proxy utility) Threat actor Unknown group; assessed with medium confid…

At a Glance Attribute Detail Malware family FDMTP implant (.NET, TouchSocket-based) Threat actor Suspected Twill Typhoon (not confirmed) Target / victims Windows users of QuickFox, mainly Chinese …