ValleyRAT spyware is being distributed in a data theft attack campaign. The dangerous thing is, the new version of this malicious code has the ability to take screenshots, monitor programs running on the computer, force shutdown and delete Windows event logs, making it difficult to investigate the virus.

ValleyRAT hides under Microsoft Office software and system processes to execute malicious actions. This virus was determined to originate from China, specializing in stealing sensitive information and infecting computers with other viruses.

Bkav experts advise users to be vigilant, not to open any strange, unauthenticated files sent from email, and not to immediately trust unverified messages, comments or links. Besides, it is important to install a strong enough anti-virus software for permanent protection.

Bkav