China-Linked Silver Fox Group Deploys New Rust-Based MODBEACON RAT with gRPC Encryption

The China-linked cybercrime group Silver Fox has been attributed to a new Rust-based remote access trojan (RAT) named MODBEACON. The malware employs gRPC streaming to encrypt command-and-control (C2) traffic, though specific technical implementation details remain undisclosed. Silver Fox is described as a high-activity threat actor distributing malware via counterfeit installers using SEO poisoning techniques. The group’s operations, while appearing low-sophistication, suggest a more organized structure beneath surface-level tactics. No specific victim sectors, attack timelines, or CVE identifiers were mentioned in the reported findings.