Chinese-Backed Silver Fox Plants Backdoors in Healthcare Networks

**Silver Fox targets healthcare imaging software:** Researchers observed a multi-stage campaign where the Silver Fox group distributed malicious installers masquerading as Philips DICOM viewers to deploy ValleyRAT backdoors, keyloggers and crypto miners via encrypted payloads hosted in cloud buckets, using extensive evasion, persistence and AV/EDR termination techniques; the report includes sample timelines, actor history and mitigation guidance for healthcare organizations.