ValleyRAT_S2 Campaign Uses Covert Malware to Extract Financial Information

Cyberpress • January 12, 2026

Share: View original

A sophisticated cyber-espionage campaign leveraging ValleyRAT_S2 malware is actively targeting Chinese-speaking regions to steal financial data ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ValleyRAT_S2 Malware Targets Financial Data in Chinese-Speaking Regions The ValleyRAT_S2 malware campaign is actively targeting organizations in Chinese-speaking areas to extract sensitive financial information. This malware functions as a remote access trojan, allowing attackers to maintain control over compromised networks for extended periods. It is part of the ValleyRAT family and is written in C++. 2 sources 45

Extracted Entities

Attack Types (1)

Campaigns (1)

ValleyRAT_S2 Campaign

Malware (1)