Windows Server flaw targeted by hackers to spread malware - here's what we know

As part of its October 2025 Patch Tuesday cumulative update, Microsoft addressed CVE-2025-59287, a “deserialization of ...
Threat Post

TA416 APT Rebounds With New PlugX Malware Variant

The TA416 APT has returned in spear phishing attacks against a range of victims – from the Vatican to diplomats in Africa – with a new Golang version of its PlugX malware loader. The TA416 advanced ...
Threat Post

PlugX, Go-To Malware for Targeted Attacks, More Prominent Than Ever

The popular remote access tool PlugX enjoyed an ascent in popularity in 2014 and is now a go-to malware for attack groups. Existing in some form since 2008, the popular remote access tool PlugX has as ...
HHS

Chinese Hackers Deploy New PlugX Variant

A remote access Trojan that's a staple of Chinese nation-state hacking is part of an ongoing campaign targeting telecom and manufacturing sectors in Central and South Asian countries. Researchers at ...
SiliconANGLE

New PlugX RAT campaign distributed through USB drives targets Steam users

Researchers from security operations company Ontinue AG today are warning of a new PlugX Remote Access Trojan campaign that is targeting Steam users. PlugX is a RAT malware family that has been around ...
WGAL

DOJ, FBI delete malware from more than 4,000 infected computers

WHEN IT COMES TO SCAMS IN THIS DIGITAL AGE, MALWARE OR MALICIOUS SOFTWARE IS ONE OF THE WAYS THAT BAD AGENTS CAN STEAL YOUR PERSONAL INFORMATION OR CAUSE DAMAGE TO YOUR ELECTRONIC DEVICES. PHONES, ...
Dark Reading

FBI Wraps Up Eradication Effort of Chinese 'PlugX' Malware

The US Justice Department and the FBI said on Jan. 14 that they were able to delete "PlugX" malware from thousands of devices globally as part of a cooperative effort. The operation spanned a series ...
The Hacker News

ShadowPad Malware Actively Exploits WSUS Vulnerability for Full System Access

ShadowPad malware is being delivered through an actively exploited WSUS vulnerability, granting attackers full system access.
Dark Reading

Is 'Virus Expert' Tied To PlugX RAT Malware?

A virus expert who may be responsible for the development of PlugX, a Remote Access Tool, or RAT, used for several years to attack computers and steal data from targets in Asia, did not adequately ...
Infosecurity-magazine.com

Black Basta Deploys PlugX Malware in USB Devices With New Technique

An operation responding to a Black Basta ransomware compromise has revealed the use of a new PlugX malware variant that can automatically infect any attached removable USB media devices. Palo Alto ...
Infosecurity-magazine.com

PlugX Targeted Attack Abuses Dropbox for C&C Updates

Security researchers at Trend Micro have spotted for the first time a targeted attack campaign using Dropbox to download and update command and control (C&C) settings. Threat analyst Maersk Menrige ...