SilverFox Targets Japanese Manufacturer with 3-Driver BYOVD Chain and ValleyRAT

SilverFox, a Chinese cybercrime group, has been observed targeting a Japanese industrial manufacturing organization using a bring your own vulnerable driver (BYOVD) attack chain that incorporates three drivers. The goal of this campaign is to deliver ValleyRAT, also known as Winos 4.0, which provides persistent remote access. The group is combining new vulnerable-driver abuse with the abuse of legitimate tools in this campaign. The attack is part of SilverFox's efforts to gain remote access to the targeted organization's systems. The use of new drivers in the BYOVD attack chain is a notable aspect of this campaign.