New Silver Fox Campaign Hits Japanese Businesses With Tax-Themed Phishing Lures

Silver Fox, an organized APT, is conducting a targeted spearphishing campaign against Japanese companies during tax/HR season, using spoofed internal emails with tax- and salary-related lures to deliver ValleyRAT. The group performs prior reconnaissance to spoof senders and craft convincing subjects, distributes payloads via public file-hosting services in compressed archives, and achieves persistence for data theft and lateral movement; analysts recommend verification of sensitive emails, checking sender addresses, and keeping security software updated.