China-Linked TA416 Targets European Governments with PlugX and OAuth-Based Phishing
A China-aligned threat actor has set its sights on European government and diplomatic organizations since mid-2025, following a two-year period of minimal ta...
RAT used extensively by Chinese APT groups for long-term espionage operations. Includes self-spreading USB worm variant.
Also known as: plugx, korplug, thudtrak, kaba, sogu
A China-aligned threat actor has set its sights on European government and diplomatic organizations since mid-2025, following a two-year period of minimal ta...