Skip to content
archiveAPT / state · 28 Jul 2026 · 15:18 UTC

RT by @cyb3rops: Cato: China-nexus SilverFox hits Japanese industrial manufacturing with ValleyRAT (Winos 4.0), extending beyond its historical Chinese-language targeting. The group evolves its BYOVD driver abuse and hijacking of signed software to evade defenses. https://www.catonetworks.com/blog/cato-ctrl-silverfox-evolves/

last 60 dispatches · spectrum

<p>Cato: China-nexus SilverFox hits Japanese industrial manufacturing with ValleyRAT (Winos 4.0), extending beyond its historical Chinese-language targeting. The group evolves its BYOVD driver abuse and hijacking of signed software to evade defenses. …

grounded ✓primary source ↗
Early access

Get the next one first.

Early access opens the actor API and MCP server first, plus alerts when an adversary you follow lands on the wire. One email when it's ready. Nothing else, ever.

bot-protected