Silver Fox Hackers Use Fake Software Installers to Compromise Windows Systems

Researchers have discovered that hackers linked to the Silver Fox group are using fake software installers to compromise Windows systems. The attackers create convincing download pages that mimic well-known software brands, such as Razer and Microsoft Edge.

The campaign has affected various industries, including healthcare, manufacturing, gaming, technology, logistics, government, and education. Most of the observed victims were linked to China-based operations or Chinese-speaking users.

Microsoft analysts identified the activity as consistent with the publicly reported Silver Fox fake-software campaign. The malware establishes a foothold, lowers defenses, and contacts attacker-controlled servers.