ValleyRAT Strikes Organizations with Stealthy DLL Hijacking Attack

ValleyRAT, a remote access trojan (RAT) first discovered in 2023, has evolved with a multi-stage infection process and enhanced evasion tactics to ensure persistent access and control over compromised systems. Attackers are actively distributing the malware through fake websites impersonating official Google Chrome download pages, deceiving users into unknowingly installing ValleyRAT. To maximize the campaign’s effectiveness, they continuously refine their tactics, recycle URLs, and adapt their techniques, making detection and mitigation increasingly challenging.