The U.S. Department of Justice has charged 12 Chinese nationals, including officers of China’s Ministry of Public Security ...

Millions of devices are still connected to the PlugX malware, despite its creators abandoning it months ago, experts have warned. Cybersecurity analysts Sekoia managed to obtain the IP address ...

Twelve Chinese nationals, including two public security ministry officers, have been indicted for a series of hacking attacks ...

The US Justice Department has charged Chinese state security officers and APT27 and i-Soon Chinese hackers linked to network ...

China-linked cyberespionage toolkits are popping up in ransomware attacks, forcing defenders to rethink how they combat state ...

The group is recognized for its use of spear-phishing campaigns and custom malware, such as the PlugX backdoor, to steal sensitive information. Their activities often align with China's strategic ...

The attacks exploited CVE-2024-24919, a Check Point Security Gateway vulnerability, to gain access to targeted networks and deploy the ShadowPad and PlugX malware, two families tightly associated ...

The attackers would abuse this vulnerability to side-load a vulnerable DLL file, and use it to deploy ShadowPad and PlugX malware. These, in turn, would drop NailaoLocker and encrypt files on the ...