Silver Fox Deploys ABCDoor Malware via Tax-Themed Phishing in India and Russia

The China-based cybercrime group Silver Fox, also known as Monarch, SwimSnake, The Great Thief of Valley, UTG-Q-1000, and Void Arachne, has been linked to a campaign targeting organizations in Russia and India using a new malware called ABCDoor. The campaign employed phishing emails impersonating the Income Tax Department of India, beginning in December 2025.