SilverFox Brings Three Bad Drivers.

A Japanese industrial manufacturer had the distinct joy of being targeted by Chinese cybercrime group Silver Fox using a three-driver vulnerable driver attack chain. The clever threat actors abused legacy drivers to happily drop ValleyRAT onto target networks without missing a beat. Blocking known vulnerable drivers and maintaining strict driver blocklists helps protect infrastructure against such BYOVD chains, assuming anyone actually manages driver blocklists in the real world.