ESET researchers uncovered a supply chain attack on a South Korean VPN by the China-aligned APT group PlushDaemon ...
In May 2024, we noticed detections of malicious code in an NSIS installer for Windows that users from South Korea had downloaded from the website of the legitimate VPN software IPany (https ...
PlushDaemon APT targets South Korean VPN with SlowStepper backdoor. Multistage DNS C&C protocol aids espionage.
ESET researchers have discovered a supply-chain attack against a VPN provider in South Korea by a newly discovered and ...
In a sophisticated cyberespionage operation, the Chinese hacking group PlushDemon has compromised the website of South Korean ...
The APT group has been active since at least 2019 and has previously targeted updates on Chinese applications. The APT was ...