TF-MAL-js.valak

Description

ThreatFox malware family `js.valak`. Printable name: Valak. Aliases: Valek.

Indicators of Compromise (1)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (1)

• ThreatFox: IOCs for this family ThreatFox Malwares

• Valak Insights - SentinelOne Inc
  web:assets.sentinelone.com

  Valak Malware and the Connection to Gozi Loader ConfCrew

  2026-05-22 05:27 UTC
• Valak, Software S0476 | MITRE ATT&CK®
  web:attack.mitre.org

  Valak is a multi-stage modular malware that can function as a standalone information stealer or downloader, first observed in 2019 targeting enterprises in the US and Germany.

  2026-05-22 05:27 UTC
• Threat Spotlight: Valak Slithers Its Way Into Manufacturing and ...
  web:blogs.cisco.com

  Threat summary Attackers are actively distributing the Valak malware family around the globe, with enterprises, in particular, being targeted. These campaigns make use of existing email threads from compromised accounts to greatly increase success. The additional use of password-protected ZIP files can create a blind spot in security protections.

  2026-05-22 05:27 UTC
• FBI warns of ATM jackpotting surge | Cybernews
  web:cybernews.com

  The FBI warns of a surge in ATM jackpotting attacks, with more than 700 incidents in 2025 alone. Hackers use Ploutus malware to force machines to dispense cash.

  2026-05-22 05:27 UTC
• 'Valak' allows criminals to move past multi-stage malware attacks ...
  web:cyberscoop.com

  Financial 'Valak' gives crooks flexibility in multi-stage malware attacks More than just a "loader" that delivers malicious code, Valak can also be used to siphon off data from enterprise networks.

  2026-05-22 05:27 UTC
• Valak (Malware Family)
  web:malpedia.caad.fkie.fraunhofer.de

  According to PCrisk, Valak is malicious software that downloads JScript files and executes them. What happens next depends on the actions performed by the executed JScript files. It is very likely that cyber criminals behind Valak attempt to use this malware to cause chain infections (i.e., using Valak to distribute other malware ). Research shows that Valak is distributed through spam ...

  2026-05-22 05:27 UTC
• Valak Malware turns enterprise data stealer - SecureBlitz
  web:secureblitz.com

  Valak Malware : Frequently Asked Questions What is Valak malware , and what does it do? Valak was originally discovered in late 2019 as a malware loader that delivered other malicious payloads. However, it recently evolved into a full-fledged data stealer, targeting sensitive information from Microsoft Exchange servers.

  2026-05-22 05:27 UTC
• Trellix Insights: Valak malware
  web:support.trellix.com

  The Valak malware family has been part of the threat landscape since late 2019 with new variations discovered throughout 2020. This malware can load other malware and steal sensitive information including credentials.

  2026-05-22 05:27 UTC
• PDF VAL AK MALWARE - Cybereason
  web:www.cybereason.com

  VAL AK MALWARE OVERVIEW THREAT TYPE: INFOSTEALER TARGET INDUSTRY: FINANCE, HEALTHCARE ATTACK GOAL: STEAL SENSITIVE DATA & DEPLOY MALWARE IMPACTED GEO: USA AND GERMANY REMEDIATION STEPS Consider social engineering awareness and training, which are key in preventing such attacks.

  2026-05-22 05:27 UTC
• Mitigating malware and ransomware attacks - The National Cyber Security ...
  web:www.ncsc.gov.uk

  How to defend organisations against malware or ransomware attacks.

  2026-05-22 05:27 UTC

Only Available for Registered Users. Sign in to view.