China-linked cyberespionage toolkits are popping up in ransomware attacks, forcing defenders to rethink how they combat state ...

The attacker deployed a variant of the PlugX cyberespionage toolset previously associated with Chinese APT groups against a ...

PlugX had been an ongoing threat for years, enabling hackers to spy on and exploit their victims. Thanks to this operation, over 4,000 US-based computers are now free of this malware.

Crucially, Symantec’s threat researchers observed the use of a custom version of the PlugX backdoor previously deployed by a ...

A previously undocumented ransomware payload named NailaoLocker has been spotted in attacks targeting European healthcare ...

There has always been some level of overlap between these two groups, but it has become more pronounced in recent years. On ...

A China-linked espionage actor may be moonlighting as a ransomware attacker, raising questions about their motives.

A toolset associated with China-linked espionage intrusions was employed in a ransomware attack, likely by a single ...

RA World ransomware used PlugX malware in Nov 2024, hinting at a lone hacker monetizing Chinese espionage tools.

In a nutshell: The Justice Department and the FBI recently announced a multi-month operation that took down a variant of the PlugX family of malware. The malicious tool was developed by a hacking ...