#PNGPlugValleyRAT
Article: https://thehackernews.com/2025/01/pngplug-loader-delivers-valleyrat.html

PNGPlug loader uses fake MSI installers to spread ValleyRAT (Silver Fox/Void Arachne) malware in Chinese-speaking areas. It uses PNG files for persistence and a DLL for injection. ValleyRAT provides remote access.#PNGPlugValleyRAT