Silver Fox’s MODBEACON hides C2 in gRPC streams, toughening detection
China-linked Silver Fox has deployed MODBEACON, a Rust‑based RAT that tunnels encrypted C2 over gRPC streaming, reusing Xray/V2Ray transport code. The design makes network traffic blend with legitimate CDN traffic, complicating detection and giving the group a more resilient ransomware‑as‑a‑service capability.