Infosecurity Magazine

Chinese-Linked Hackers Exploit Windows Flaw to Spy on Belgian and Hungarian Diplomats

UNC6384 is a Chinese-linked cyber espionage group identified by Google’s Threat Intelligence Group (GTIG) in August 2025. The threat group primarily targets diplomatic entities, initially focusing on ...
Threat Post

TA416 APT Rebounds With New PlugX Malware Variant

The TA416 APT has returned in spear phishing attacks against a range of victims – from the Vatican to diplomats in Africa – with a new Golang version of its PlugX malware loader. The TA416 advanced ...
Threat Post

PlugX, Go-To Malware for Targeted Attacks, More Prominent Than Ever

The popular remote access tool PlugX enjoyed an ascent in popularity in 2014 and is now a go-to malware for attack groups. Existing in some form since 2008, the popular remote access tool PlugX has as ...
HHS

Chinese Hackers Deploy New PlugX Variant

A remote access Trojan that's a staple of Chinese nation-state hacking is part of an ongoing campaign targeting telecom and manufacturing sectors in Central and South Asian countries. Researchers at ...
SiliconANGLE

New PlugX RAT campaign distributed through USB drives targets Steam users

Researchers from security operations company Ontinue AG today are warning of a new PlugX Remote Access Trojan campaign that is targeting Steam users. PlugX is a RAT malware family that has been around ...
Yahoo

FBI to ‘remove’ this nasty malware that’s affected 2.5 million PCs

A malware originating from China has now been contained after the FBI gained a court order to have the harmful code deleted from thousands of Windows PCs. The agency has successfully put an end to the ...
WGAL

DOJ, FBI delete malware from more than 4,000 infected computers

WHEN IT COMES TO SCAMS IN THIS DIGITAL AGE, MALWARE OR MALICIOUS SOFTWARE IS ONE OF THE WAYS THAT BAD AGENTS CAN STEAL YOUR PERSONAL INFORMATION OR CAUSE DAMAGE TO YOUR ELECTRONIC DEVICES. PHONES, ...
Infosecurity-magazine.com

Black Basta Deploys PlugX Malware in USB Devices With New Technique

An operation responding to a Black Basta ransomware compromise has revealed the use of a new PlugX malware variant that can automatically infect any attached removable USB media devices. Palo Alto ...
InfoWorld

New IE exploit variant used to distribute PlugX malware, researchers say

Researchers from security vendor AlienVault have identified a variant of a recently discovered Internet Explorer exploit that is used to infect targeted computers with the PlugX RAT (remote access ...
PC World

IE exploit distributes PlugX malware, researchers say

Researchers from security vendor AlienVault have identified a variant of a recently discovered Internet Explorer exploit that is used to infect targeted computers with the PlugX remote access Trojan ...