Back Cybersecuritynews

ValleyRAT_S2 Attacking Organizations to Deploy Stealthy Malware and Extract Financial Details

Cybersecuritynews •Tushar Subhra Dutta • January 12, 2026

A new wave of attacks is using the ValleyRAT_S2 malware to quietly break into organizations, stay hidden for long periods, and steal sensitive financial information. ValleyRAT_S2 is the second-stage payload of the ValleyRAT family and is written in C++. Once inside a network, it behaves like a full remote access trojan, giving attackers strong control […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ValleyRAT_S2 Malware Targets Financial Data in Chinese-Speaking Regions The ValleyRAT_S2 malware campaign is actively targeting organizations in Chinese-speaking areas to extract sensitive financial information. This malware functions as a remote access trojan, allowing attackers to maintain control over compromised networks for extended periods. It is part of the ValleyRAT family and is written in C++. 2 sources 45

ValleyRAT_S2 Attacking Organizations to Deploy Stealthy Malware and Extract Financial Details

The full story

Extracted Entities

Attack Types (2)

Malware (1)