News

Threat Post10y
Researchers: PlugX More Prominent Than Ever | Threatpost
The popular remote access tool PlugX enjoyed an ascent in popularity in 2014 and is now a go-to malware for attack groups. Existing in some form since 2008, the popular remote access tool PlugX ...
Hosted on MSN5mon
FBI Crushes PlugX Threat: Major Blow to China's Cyber Espionage Network - MSN
PlugX had been an ongoing threat for years, enabling hackers to spy on and exploit their victims. Thanks to this operation, over 4,000 US-based computers are now free of this malware.
Ars Technica5mon
FBI forces Chinese malware to delete itself from thousands of US computers - Ars Technica
The People's Republic of China (PRC) government paid the Mustang Panda group to develop a version of PlugX malware used to infect, control, and steal information from victim computers, the FBI said.
Threat Post4y
TA416 APT Rebounds With New PlugX Malware Variant
The PlugX malware then ultimately calls out to the command and control (C2) server IP, 45.248.87[.]162. Researchers said that continued activity by TA416 demonstrates a persistent adversary making ...
Bleeping Computer1y
Researchers sinkhole PlugX malware server with 2.5 million unique IPs - BleepingComputer
Researchers have sinkholed a command and control server for a variant of the PlugX malware and observed in six months more than 2.5 million connections from unique IP addresses.
Gizmodo5mon
The FBI Says It Made Malware Delete Itself From American's Computers - Gizmodo
PlugX is a Remote Access Trojan that has been around since at least 2008, according to Malpedia, and has been a favorite tool of a notorious Chinese hacking group that is often referred to as ...
Ars Technica1y
Millions of IPs remain infected by USB worm years after its creators left it for dead - Ars Technica
Since then, their server continues to receive PlugX traffic from 90,000 to 100,000 unique IP addresses every day. Over the span of six months, the researchers counted requests from nearly 2.5 ...
CSOonline5mon
International effort erases PlugX malware from thousands of Windows computers
PlugX is a remote access Trojan (RAT) consisting a malicious DLL that can perform a variety of actions on the infected endpoint, including downloading and deploying new modules or plugins.
InfoWorld12y
New IE exploit variant used to distribute PlugX malware, researchers say
AlienVault researchers have been tracking attacks that use the PlugX RAT since earlier this year. Based on file debug paths found inside the malware, they believe that the relatively new RAT was ...
UPI5mon
FBI erases China-sponsored malware from thousands of U.S. computers
Jan. 14 (UPI) --Federal authorities announced Tuesday that they have erased Chinese malware from thousands of computers across the United States.The malware, a variant of the PlugX malicious ...
PC World12y
IE exploit distributes PlugX malware, researchers say
AlienVault researchers have been tracking attacks that use the PlugX RAT since earlier this year. Based on file debug paths found inside the malware, ...