SilverFox Targets Japanese Manufacturer With 3-Driver BYOVD Chain and ValleyRAT

The Chinese cybercrime group Silver Fox was observed using a chain of three vulnerable drivers in a bring-your-own-vulnerable-driver (BYOVD) attack against a Japanese industrial manufacturing organization, per The Hacker News.

The campaign combines new vulnerable-driver abuse with abuse of legitimate tooling to ultimately deliver ValleyRAT (also known as Winos 4.0) for persistent remote access. The attack targeted the industrial manufacturing sector specifically.