# ValleyRAT

Published articles for ValleyRAT.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## ValleyRAT masquerading as adware

DevFeed: [ValleyRAT masquerading as adware](<https://devfeed.tech/articles/valleyrat-masquerading-as-adware-48831.md>)

Original publisher: [Read original article](<https://securelist.com/valleyrat-backdoor-adware/121175/>)

Author: Pavel Bukhtenko

Published: 2026-08-31T10:00:21Z

Content type: article

Language: en

Sources: [Securelist](<https://devfeed.tech/sources/securelist.md>)

Topics: [backdoor](<https://devfeed.tech/topics/backdoor.md>), [Malware](<https://devfeed.tech/topics/malware.md>), [infection chain](<https://devfeed.tech/topics/infection-chain.md>), [payload](<https://devfeed.tech/topics/payload.md>), [Windows](<https://devfeed.tech/topics/windows.md>)

Tags: [adware](<https://devfeed.tech/tags/adware.md>), [backdoor](<https://devfeed.tech/tags/backdoor.md>), [defender](<https://devfeed.tech/tags/defender.md>), [detection](<https://devfeed.tech/tags/detection.md>), [dll-sideloading](<https://devfeed.tech/tags/dll-sideloading.md>), [full](<https://devfeed.tech/tags/full.md>), [infection](<https://devfeed.tech/tags/infection.md>), [infection-chain](<https://devfeed.tech/tags/infection-chain.md>), [installer](<https://devfeed.tech/tags/installer.md>), [large](<https://devfeed.tech/tags/large.md>), [malware](<https://devfeed.tech/tags/malware.md>), [malware-descriptions](<https://devfeed.tech/tags/malware-descriptions.md>), [malware-technologies](<https://devfeed.tech/tags/malware-technologies.md>), [medium](<https://devfeed.tech/tags/medium.md>), [payload](<https://devfeed.tech/tags/payload.md>), [silver-fox](<https://devfeed.tech/tags/silver-fox.md>), [thumbnail](<https://devfeed.tech/tags/thumbnail.md>), [trojan](<https://devfeed.tech/tags/trojan.md>), [valleyrat](<https://devfeed.tech/tags/valleyrat.md>), [windows-malware](<https://devfeed.tech/tags/windows-malware.md>)

### AI overview

This security analysis examines how attackers distributed the ValleyRAT backdoor disguised as adware. It traces the infection chain from a malicious installer through QN Wallpaper, DLL sideloading, Windows Defender disabling, and delivery of the backdoor.

### Source excerpt

Threat actors are distributing the ValleyRAT backdoor disguised as adware. We analyze the infection chain, from the malicious installer to the final payload.