http://svoboda7s2yird3p643lzbl7d6yc3rcciowopcxclqw6fsq26vmqruyd.onion/blog/svoboda-cybersecurity-brief-2025-06-28
Mitigation : Patch MOVEit, block suspicious IPs, and restrict internet exposure. Source: The Hacker News Silver Fox targets Chinese users with Sainbox RAT and Hidden rootkit The China-linked group distributed fake WPS Office installers via Chinese-language sites, deploying Sainbox RAT (Gh0st variant) and Hidden rootkit via DLL sideloading.