ValleyRAT first came to the attention of researchers in March 2023. While it’s a significant concern, it is not the only malware variant being employed. Researchers also identified Sainbox, a variant of the infamous Gh0stRAT, and Purple Fox. The Purple Fox campaign primarily targeted Japanese organizations, using Japanese-language invoice themes in some instances.
