China-based threat actor Silver Fox has been using the disguise of a legitimate healthcare app to deliver a backdoor to unsuspecting users. It is unknown if the malicious actor is backed by the Chinese government. The attacker has been disguising the malware as the Philips DICOM viewer, a healthcare app. Researchers are unsure if Silver Fox is targeting specific sectors or if the group is simply trying to spread their malware as much as possible. However, information suggests that the group may be expanding its targets to new regions and sectors. 

Read more: https://www.helpnetsecurity.com/2025/02/25/china-based-silver-fox-spoofs-healthcare-apps-dicom-viewer-to-deliver-valleyrat-malware/