{"id":8626,"date":"2024-08-20T09:51:54","date_gmt":"2024-08-20T09:51:54","guid":{"rendered":"\/cybersecurity-blog\/?p=8626"},"modified":"2024-08-20T09:52:19","modified_gmt":"2024-08-20T09:52:19","slug":"new-valleyrat-campaign","status":"publish","type":"post","link":"https:\/\/any.run\/cybersecurity-blog\/new-valleyrat-campaign\/","title":{"rendered":"New ValleyRAT Campaign Spotted with Advanced Techniques\u00a0"},"content":{"rendered":"\n

A sophisticated campaign is targeting Chinese-speaking users, distributing<\/a> a malware known as ValleyRAT.\u00a0<\/p>\n\n\n\n

What’s happening? <\/h2>\n\n\n\n

There\u2019s a new campaign spreading a multi-stage threat designed to monitor and control infected systems while deploying additional plugins to cause further damage. <\/p>\n\n\n\n

Key components of the campaign:<\/h3>\n\n\n\n
\n \n\n \n \n \n \n \n
\n Component\u00a0 <\/th>\n \n Details\u00a0 <\/th>\n <\/tr>\n
\n Target\u00a0 <\/td>\n \n Chinese-speaking users\u00a0 <\/td>\n <\/tr>\n
\n Attack Method\u00a0 <\/td>\n \n Email messages with URLs pointing to compressed executables\u00a0 <\/td>\n <\/tr>\n
\n Malware\u00a0 <\/td>\n \n ValleyRAT\u00a0 <\/td>\n <\/tr>\n
\n Affected systems\u00a0 <\/td>\n \n Windows\u00a0 <\/td>\n <\/tr>\n <\/table>\n<\/div>