New MODBEACON RAT Uses gRPC Streaming for Encrypted C2 Traffic

The China-linked cybercrime group Silver Fox has developed a new Rust-based remote access trojan (RAR) called MODBEACON, which uses gRPC streaming for encrypted command-and-control traffic. QiAnXin attributes the threat to a low-sophistication, high-activity operation spreading malware through counterfeit installers and SEO poisoning techniques.