Chinese Group Silver Fox Uses Fake Websites to Deliver Sainbox RAT and Hidden Rootkit

A Chinese hacking group known as Silver Fox (Void Arachne) has launched a campaign utilizing counterfeit websites that promote popular software like WPS Office, Sogou, and DeepSeek to distribute malware such as the Sainbox Remote Access Trojan (RAT) and the open-source Hidden rootkit. This campaign demonstrates an ongoing tactic of leveraging fake software sites to infect targets, with attribution based on tradecraft similarities to previous operations by the group.