Throughout order to install the PlugX remote access trojan on compromised systems, a Chinese nation-state group has been seen targeting foreign affairs ministries and embassies throughout Europe.
The SmugX operation, according to cybersecurity company Check Point, has been going on since at least December 2022.
According to Check Point, “the campaign leverages novel delivery mechanisms to deploy (most notably – HTML Smuggling) a new variation of PlugX, an implant frequently connected to numerous Chinese threat actors.
Although the payload itself resembles those of earlier PlugX variations read more Chinese Hackers Use HTML Smuggling to Infiltrate European Ministries with PlugX.
Stay one step ahead of cyber threats with ReconBee.com. Explore our comprehensive coverage of recent cyber attacks, cybersecurity awareness, and the latest cybersecurity news to safeguard your digital world.