PlushDaemon compromises network devices for adversary-in-the-middle attacks
ESET researchers provide insights into how PlushDaemon performs adversary-in-the-middle attacks using a previously undocumented network implant that we have named...
PlushDaemon
EdgeStepper Implant Reroutes DNS Queries to Deploy Malware via Hijacked Software Updates
Nov 19, 2025Ravie LakshmananCyber Espionage / MalwareThe threat actor known as PlushDaemon has been observed using a previously undocumented Go-based...
South Korean VPN Provider Targeted by PlushDaemon APT in Cyberattack
ESET recently revealed that a newly identified APT group, PlushDaemon, with ties to China, carried out a supply chain attack...
