Tag: SteelFox

SteelFox Leverages Signed Windows Drivers to Attack Kernel

Posted on

This week, the SonicWall Capture Labs threat research team investigated a sample of SteelFox malware. This is bundled with “software activators” for JetBrains and Foxit PDF readers. During installation, they run as a service and use vulnerable signed Windows drivers Read More …

New SteelFox Trojan mimics software activators, stealing sensitive data and mining cryptocurrency

Posted on

In August 2024, Kaspersky team identified a new crimeware bundle, which we named “SteelFox”. Delivered via sophisticated execution chains including shellcoding, this threat abuses Windows services and drivers. It spreads via forums posts, torrent trackers and blogs, imitating popular software Read More …