#ParsedReport #CompletenessHigh
08-09-2026

HVNC Backdoor Targets LATAM Organizations with Fake Tax and DocuSign Lures

https://any.run/cybersecurity-blog/hvnc-backdoor-targets-latam/

Report completeness: High

Actors/Campaigns:
Silver_fox

Threats:
Hvnc_tool
Clickfix_technique
Winos
Anydesk_tool
Spear-phishing_technique

Victims:
Banking and financial services

Industry:
Financial

Geo:
Brazilian, Latam, Brasil, Latin america, Portuguese

TTPs:
Tactics: 9
Technics: 18

IOCs:
File: 18
IP: 4
Command: 1
Path: 5
Hash: 9

Soft:
Firefox, Microsoft Visual C++, chrome, opera, Chromium

Algorithms:
zip, sha256, crc-32, base64, xor

Win API:
RUN, NetBIOS, SendInput

Win Services:
mcshield, ekrn

Languages:
php, powershell

Platforms:
x64, amd64

YARA: Found