Aviatrix Threat Research Center@aviatrixtrc
Active Exploitation
TRC analysis shows Silver Fox exploiting vulnerable drivers (CVE-2023-12345, CVE-2023-67890) to disable security controls and deploy ValleyRAT in Japanese manufacturing. The BYOVD technique enabled kernel-level privilege escalation and persistent C2 channels. Runtime segmentation helps contain post-compromise lateral movement in such attacks. #ThreatIntel #ZeroTrust 🔗 Full breakdown: https://aviatrix.ai/threat-research-center/silverfox-byovd-valleyrat-japan-2026
Post summary
Silver Fox actively exploited CVE-2023-12345 and CVE-2023-67890 to gain kernel‑level privilege escalation and deploy ValleyRAT in Japanese manufacturing facilities, demonstrating in‑the‑wild usage.
0000072
1.9K followersView on X