Void Arachne
Also reported as Silver Fox. Linked to China by one source.
Reports per quarter
Techniques seen in the last two years
- T1027 3 reports
- T1057 3 reports
- T1105 3 reports
- T1566.001 3 reports
- T1620 3 reports
- T1041 2 reports
- T1053.005 2 reports
- T1059 2 reports
- T1059.001 2 reports
- T1068 2 reports
Show all 70 techniques Show fewer
- T1071.001 2 reports
- T1082 2 reports
- T1095 2 reports
- T1189 2 reports
- T1204.002 2 reports
- T1218 2 reports
- T1497 2 reports
- T1566.002 2 reports
- T1573 2 reports
- T1622 2 reports
- T1003 1 report
- T1005 1 report
- T1008 1 report
- T1014 1 report
- T1020 1 report
- T1027.013 1 report
- T1036.004 1 report
- T1048 1 report
- T1053 1 report
- T1055.001 1 report
- T1055.009 1 report
- T1056.001 1 report
- T1070 1 report
- T1070.004 1 report
- T1078 1 report
- T1083 1 report
- T1091 1 report
- T1106 1 report
- T1112 1 report
- T1113 1 report
- T1125 1 report
- T1129 1 report
- T1190 1 report
- T1195 1 report
- T1195.001 1 report
- T1202 1 report
- T1203 1 report
- T1204.001 1 report
- T1204.004 1 report
- T1218.005 1 report
- T1218.010 1 report
- T1218.011 1 report
- T1489 1 report
- T1497.001 1 report
- T1518.001 1 report
- T1543.003 1 report
- T1547.001 1 report
- T1552 1 report
- T1555 1 report
- T1555.001 1 report
- T1555.003 1 report
- T1560 1 report
- T1564.010 1 report
- T1566 1 report
- T1566.003 1 report
- T1567.002 1 report
- T1574.001 1 report
- T1583.001 1 report
- T1588.002 1 report
- T1659 1 report
Counts come from technique IDs in the actor's report text.
CVEs named in reports
- CVE-2017-0144 KEV ransomware
- CVE-2017-0199 KEV ransomware
- CVE-2017-11882 KEV ransomware
- CVE-2021-35211 KEV ransomware
- CVE-2023-2868 KEV
- CVE-2023-36884 KEV ransomware
- CVE-2024-21412 KEV ransomware
- CVE-2024-36991
- CVE-2024-38080 KEV
- CVE-2024-38112 KEV
- CVE-2024-42009 KEV
- CVE-2024-4885 KEV
Show all 18 CVEs Show fewer
- CVE-2024-9680 KEV ransomware
- CVE-2025-48561
- CVE-2025-8088 KEV ransomware
- CVE-2026-21236
- CVE-2026-2441 KEV
- CVE-2027-11882
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
Show all 46 reports Show fewer
Newest first. Details opens the report in Explore.