PKPLUG Archives - Unit 42

Conceptual image representing adversaries and advanced persistent threats. Here, we discuss a method for finding these groups by hunting for unsigned DLLs.

2,767

people reacted

署名されていないDLLのハントによるAPT攻撃グループの発見

By Daniela Shalev and Itay Gamliel
October 4, 2022 at 12:32 AM

0

3 min. read

A conceptual image representing THOR, a previously unseen PlugX variant deployed by the PKPLUG Group. The image features a Panda because PKPLUG is also known as Mustang Panda. It also features the logos of Palo Alto Networks and Unit 42.

3,219

people reacted

THOR: PKPLUG攻撃グループによるMicrosoft Exchange Server攻撃で展開された未知のPlugX亜種

By Alex Hinchliffe and Mike Harbison
July 27, 2021 at 6:40 PM

1

5 min. read