Taipei, Taiwan – February 28, 2025 –A Chinese-backed hacker group, Silver Fox APT, is using Winos 4.0 malware to spy on WeChat users and steal online banking data. Cybersecurity experts warn of a rapidly escalating cyber threat targeting financial and corporate sectors.
A chilling new cyberattack campaign has emerged, with Silver Fox APT deploying Winos 4.0 malware to hijack WeChat and online banking data. The China-linked threat actor is using highly sophisticated phishing attacks, masquerading as Taiwan’s National Taxation Bureau, to infiltrate corporate networks and steal financial credentials, chat logs, and sensitive user data.
Cybersecurity firm Fortinet FortiGuard Labs uncovered the attack, revealing that victims are tricked into downloading a fake tax document containing a malicious DLL file.
Once executed, Winos 4.0 silently installs itself, allowing attackers to capture keystrokes, take screenshots, and even alter clipboard content—a tactic specifically aimed at stealing online banking credentials and intercepting private WeChat conversations.
Pei Han Liao, security researcher at Fortinet warns:
This is a highly targeted attack, with clear financial and surveillance motives. Silver Fox APT has been evolving its malware, making detection increasingly difficult.
The cybercriminals behind this attack have also weaponized drive-by downloads, infecting victims through compromised websites posing as official banking and WeChat login pages. Once the malware is installed, it establishes a remote access trojan (RAT), allowing attackers to monitor user activity in real time.
Dmitry Volkov, CEO of cybersecurity firm Group-IB, added:
These tactics are not just about financial gain, they are a long-term espionage strategy. Organizations must adopt strict endpoint security measures to counter such threats.
Cybersecurity experts urge users to avoid clicking suspicious links, enable two-factor authentication, and monitor financial transactions to prevent falling victim to this escalating cyber threat.
As Silver Fox APT spies on WeChat and banking data, ExpressVPN keeps your online activity private and secure from cyber threats.
Other News At VPNRanks
Hey, wait!
Stay informed on the latest privacy updates, cybersecurity insights, and internet freedom news by following VPNRanks news daily! As your primary resource for critical updates in online security, we ensure you’re always in the know. Make VPNRanks your go-to guide for safeguarding your digital life.
