Discovery of MODBEACON RAT Utilizing gRPC Streaming for Encrypted Command-and-Control Communications

A new Rust-based Remote Access Trojan (RAT) named MODBEACON has been identified, utilizing gRPC streaming for encrypted command-and-control (C2) communications, attributed to the China-linked Silver Fox cybercrime group. The malware employs advanced techniques, including modular architecture and CDN-based C2 infrastructure, to target enterprises in Asia while evading detection.

The China-linked cybercrime group known as Silver Fox has been attributed to a new Rust-based remote access trojan (RAR) called MODBEACON.

Chinese cybersecurity company QiAnXin said that while the threat cluster may appear like a low-sophistication, high-activity operation that propagates malware via counterfeit installers using SEO poisoning techniques, it belies their true organizational

Read original article