Silver Fox Launches Cyber Campaign with AtlasCross RAT Targeting Chinese-Speaking Users in Asia

The threat actor "Silver Fox" is conducting an active cyber campaign targeting Chinese-speaking users in Asia, deploying a previously undocumented remote access trojan (RAT) named AtlasCross. The operation uses typosquatted domains impersonating trusted software brands, including VPN clients, encrypted messengers, video conferencing tools, cryptocurrency trackers, and e-commerce applications. Eleven confirmed delivery domains have been identified as part of the infrastructure, though no specific dates or CVE IDs were mentioned. The campaign focuses on distributing the AtlasCross RAT, though the full impact of the malware remains undisclosed. No additional technical details about the RAT’s functionality or attack vectors were provided.