THOR: Previously Unseen PlugX Variant Deployed During Microsoft Exchange Server Attacks by PKPLUG GroupPalo Alto Unit 42·Jun 6, 12:19 UTC · Jun 6, 2024VulnerabilityCVE-2021-26855CVE-2021-2706560
How RainyDay, Turian and a new PlugX variant abuse DLL search order hijackingCisco Talos·Sep 23, 18:00 UTC · Sep 23, 2025Malware42
DragonRank, a Chinese-speaking SEO manipulator service providerCisco Talos·Sep 10, 04:00 UTC · Sep 10, 2024Vulnerability42
PlugX Uses Legitimate Samsung Application for DLL SidePalo Alto Unit 42·Nov 1, 09:43 UTC · Nov 1, 2018VulnerabilityCVE-2012-015835
Mustang Panda deploys a new wave of malware targeting EuropeCisco Talos·May 5, 12:01 UTC · May 5, 2022Malware42
Attack Campaign on the Government of Thailand Delivers Bookworm TrojanPalo Alto Unit 42·Nov 1, 09:57 UTC · Nov 1, 2018Malware30
Back Despite Disruption: RedDelta Resumes OperationsRecorded Future·Jun 30, 00:00 UTC · Jun 30, 2026Malware30
FBI deleted China-linked PlugX malware from +4,200 US computersSecurity Affairs·Jan 14, 21:58 UTC · Jan 14, 2025Malware55
PlugX malware: A good hacker is an apologetic hackerKaspersky Securelist·Mar 10, 11:59 UTC · Mar 10, 2016Malware42
FBI Deletes PlugX Malware from 4,250 Hacked Computers in MultiThe Hacker News·Jan 20, 14:26 UTC · Jan 20, 2025Malware30
PlugX RAT with Time Bomb abuses Dropbox in targeted attacksSecurity Affairs·Apr 25, 21:35 UTC · Apr 25, 2020Malware42
DOJ deletes China-linked PlugX malware off more than 4,200 US computersThe Record·Jan 14, 19:20 UTC · Jan 14, 2025Malware42
Researchers Discover New PlugX Malware Variant Spreading via Removable USB DevicesThe Hacker News·Feb 7, 06:11 UTC · Feb 7, 2023Malware55
Chinese cyberspies used a new PlugX variant, dubbed THOR, in attacks against MS Exchange ServersSecurity Affairs·Jul 28, 16:18 UTC · Jul 28, 2021Vulnerability42
French Authorities Launch Operation to Remove PlugX Malware from Infected SystemsThe Hacker News·Jan 3, 04:54 UTC · Jan 3, 2025Malware55
Mustang Panda Targets Asia with Advanced PlugX Variant DOPLUGSThe Hacker News·Feb 22, 02:29 UTC · Feb 22, 2024Threat actor57
Suspected Chinese Group Calypso APT Exploiting Vulnerable Microsoft Exchange ServersRecorded Future·Dec 13, 00:00 UTC · Dec 13, 2018Vulnerability in the wildCVE-2021-26855CVE-2021-27065CVE-2021-26857+1 CVEs60
China-Linked TA416 Targets European Governments with PlugX and OAuthThe Hacker News·Apr 3, 17:34 UTC · Apr 3, 2026VulnerabilityCVE-2025-31324CVE-2025-099460
Chinese PlugX Malware Deleted in Global Law Enforcement OperationInfosecurity Magazine·Jan 15, 14:00 UTC · Jan 15, 2025Malware30
FBI removed PlugX malware from U.S. computersHelp Net Security·Jan 15, 00:00 UTC · Jan 15, 2025Malware30
Fake Claude AI installer abuses DLL sideloading to deploy PlugXSecurity Affairs·Apr 14, 07:19 UTC · Apr 14, 2026Malware30
Law enforcement action deletes PlugX malware from thousands of machinesCyberScoop·Jan 14, 17:33 UTC · Jan 14, 2025Malware in the wild60
Chinese Hackers Targeting Russian Military Personnel with Updated PlugX MalwareThe Hacker News·Apr 28, 03:16 UTC · Apr 28, 2022Malware42
PlugX RAT compromised official releases of games in AsiaSecurity Affairs·Aug 22, 22:15 UTC · Aug 22, 2018Malware42
Chinese State-Sponsored Group ‘RedDelta’ Targets the Vatican and Catholic OrganizationsRecorded Future·Jul 16, 00:00 UTC · Jul 16, 2026Threat actor57
China-Linked PlugX and Bookworm Malware Attacks Target Asian Telecom and ASEAN NetworksThe Hacker News·Oct 2, 06:36 UTC · Oct 2, 2025Malware42
French authorities launch disinfection operation to eradicate PlugX malware from infected hostssSecurity Affairs·Jul 28, 19:58 UTC · Jul 28, 2024Malware42
Chinese Hackers Implant PlugX Variant on Compromised MS Exchange ServersThe Hacker News·Mar 23, 11:47 UTC · Mar 23, 2022Ransomware60
China-linked PlugX malware infections found in more than 170 countriesThe Record·Apr 26, 11:51 UTC · Apr 26, 2024Malware30
Hackers Exploiting Remote Desktop Software Flaws to Deploy PlugX MalwareThe Hacker News·Mar 10, 06:46 UTC · Mar 10, 2023Malware42
Black Basta Deploys PlugX Malware in USB Devices With New TechniqueInfosecurity Magazine·Jan 27, 17:00 UTC · Jan 27, 2023Malware55
RedDelta Targets European Government Organizations and Continues to Iterate Custom PlugX VariantRecorded Future·Aug 22, 00:00 UTC · Aug 22, 2025Malware42
Chinese Hackers Use HTML Smuggling to Infiltrate European Ministries with PlugXThe Hacker News·Jul 4, 06:06 UTC · Jul 4, 2023Vulnerability42
PlugX malware delivered by exploiting flaws in Chinese programsSecurity Affairs·Mar 11, 19:40 UTC · Mar 11, 2023Malware42
DiceyF deploys GamePlayerFramework in online casino development studioKaspersky Securelist·Oct 18, 17:33 UTC · Oct 18, 2022Malware42
The rush for CVE-2013-3906Kaspersky Securelist·Nov 14, 16:58 UTC · Nov 14, 2013VulnerabilityCVE-2013-390647