https://thedailytechfeed.com/cybercriminals-use-fake-huorong-antivirus-site-to-spread-valleyrat-malware/
Cybercriminals Use Fake Huorong Antivirus Site to Spread ValleyRAT Malware – The Daily Tech Feed
to spreadthe dailycybercriminalsusefake
https://soclyde.com/fr/blog/valleyrat-adware-backdoor-signee/
ValleyRAT se cache dans QN Wallpaper | Soclyde
Aug 31, 2026 - Kaspersky détaille comment un installateur lié à QN Wallpaper charge ValleyRAT par DLL sideloading et contourne les protections du poste.
valleyratcachedanswallpaper
https://securelist.com/valleyrat-backdoor-adware/121175/
ValleyRAT is spreading disguised as adware | Securelist
Sep 11, 2026 - Threat actors are distributing the ValleyRAT backdoor disguised as adware. We analyze the infection chain, from the malicious installer to the final payload.
valleyratspreadingdisguisedadwaresecurelist
https://socprime.com/ko/active-threats/%EA%B0%80%EC%A7%9C-%EC%84%A4%EC%B9%98-%ED%94%84%EB%A1%9C%EA%B7%B8%EB%9E%A8-%EC%B2%B4%EC%9D%B8-%EB%81%9D-valleyrat-%EA%B0%90%EC%97%BC/
가짜 LINE 설치 프로그램, NSIS 체인을 통해 ValleyRAT 드롭
Aug 17, 2026 - NSIS 가짜 LINE 설치 프로그램이 의심스러운 인증서로 DLL/INI 로더를 드롭하고, 작업을 통해 지속되며, PoolParty v7으로 인젝션을 수행하고 HK C2로 데이터를 전송합니다.
linensisvalleyrat