APT Explorer

All actors

Calypso

Also reported as BRONZE MEDLEY, Red Lamassu and Bronze Medley. Linked to China by three sources.

Reports
167
Last reported
Known CVEs
110
Origin
China
ID
calypso
Sources
MISPETDAMalpedia
Merge evidence
5 alias matches

Reports per quarter

Dated reports, 2013 Q1 to 2026 Q2.

Techniques seen in the last two years

Show all 38 techniques Show fewer

Counts come from technique IDs in the actor's report text.

CVEs named in reports

Show all 110 CVEs Show fewer

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

  1. Open Directory, Open Season: Inside Red Lamassu’s JFMBackdoor

    Malpedia library date ORKL

    Archived copy on ORKL Details

  2. China-based APT Mustang Panda might still have continued their attack activities against organizations in

    date ORKL added it ORKL

    Archived copy on ORKL Details

  3. Accenture | Let there be change

    date ORKL added it ORKL

    Archived copy on ORKL Details

  4. PlugX (Malware Family)

    date ORKL added it ORKL

    The title opens a link whose publisher is not confirmed. Archived copy on ORKL Details

  5. Accenture | Let there be change

    date ORKL added it ORKL

    Archived copy on ORKL Details

  6. PlugX : Mustang Panda APT

    Malpedia library date ORKL

    Archived copy on ORKL Details

  7. PlugX Meeting Invitation via MSBuild and GDATA

    Malpedia library date ORKL

    Archived copy on ORKL Details

  8. The HoneyMyte APT evolves with a kernel-mode rootkit and a ToneShell backdoor

    Malpedia library date ORKL

    Archived copy on ORKL Details

  9. UNC6384 Weaponizes ZDI-CAN-25373 Vulnerability to Deploy PlugX Against Hungarian and Belgian Diplomatic Entities - Arctic Wolf

    Malpedia library date ORKL

    Archived copy on ORKL Details

  10. PRC-Nexus Espionage Campaign Hijacks Web Traffic to Target Diplomats

    Malpedia library date ORKL

    Archived copy on ORKL Details

Show all 167 reports Show fewer

  1. Updated Shadowpad Malware Leads to Ransomware Deployment

    Malpedia library date ORKL

    Archived copy on ORKL Details

  2. Meet NailaoLocker: a ransomware distributed in Europe by ShadowPad and PlugX backdoors

    Malpedia library date ORKL

    Archived copy on ORKL Details

  3. Updated Shadowpad Malware Leads to Ransomware Deployment

    Malpedia library date ORKL

    Archived copy on ORKL Details

  4. China-linked Espionage Tools Used in Ransomware Attacks

    Malpedia library date ORKL

    Archived copy on ORKL Details

  5. CL-STA-0048: An Espionage Operation Against High-Value Targets in South Asia

    Malpedia library date ORKL

    Archived copy on ORKL Details

  6. Justice Department and FBI Conduct International Operation to Delete Malware Used by China-Backed Hackers

    Malpedia library date ORKL

    Archived copy on ORKL Details

  7. Chinese State-Sponsored RedDelta Targeted Taiwan, Mongolia, and Southeast Asia with Adapted PlugX Infection Chain

    Malpedia library date ORKL

    Archived copy on ORKL Details

  8. Unmasking Adversary Infrastructure: How Certificates and Redirects Exposed Earth Baxia and PlugX Activity

    Malpedia library date ORKL

    Archived copy on ORKL Details

  9. Down-the-GRAYRABBIT-hole-exposing-UNC3569-and-its-modus-operandi.pdf

    Malpedia library date ORKL

    Archived copy on ORKL Details

  10. DragonRank, a Chinese-speaking SEO manipulator service provider

    Malpedia library date ORKL

    Archived copy on ORKL Details

  11. Sailing_the_Seven_SEAs_Deep_Dive_into_Polaris_Arsenal_and_Intelligence_Insights.pdf

    Malpedia library date ORKL

    Archived copy on ORKL Details

  12. China-Nexus Threat Group ‘Velvet Ant’ Abuses F5 Load Balancers for Persistence

    Malpedia library date ORKL

    Archived copy on ORKL Details

  13. Operation Diplomatic Specter: An Active Chinese Cyberespionage Campaign Leverages Rare Tool Set to Target Governmental Entities in the Middle East, Africa and Asia

    Malpedia library date ORKL

    Archived copy on ORKL Details

  14. Finding Malware: Detecting SOGU with Google Security Operations.

    Malpedia library date ORKL

    Archived copy on ORKL Details

  15. Wirtschaftsspionage gegen Volkwagen: VW-Konzern wurde jahrelang ausge…

    Malpedia library date ORKL

    The title opens archive.today, not the publisher’s page. Archived copy on ORKL Details

  16. Earth Krahang Exploits Intergovernmental Trust to Launch Cross-Government Attacks

    Malpedia library date ORKL

    Archived copy on ORKL Details

  17. The Secret Life of RATs: connecting the dots by dissecting multiple backdoors

    Malpedia library date ORKL

    Archived copy on ORKL Details

  18. PowerPoint 簡報

    Malpedia library date TeamT5 ORKL

    Archived copy on ORKL Details

  19. A Look into PlugX Kernel driver

    Malpedia library date ORKL

    Archived copy on ORKL Details

  20. 2023 Adversary Infrastructure Report

    Malpedia library date ORKL

    Archived copy on ORKL Details

  21. Unmasking the Enigma: A Historical Dive into the World of PlugX Malware | Splunk

    Malpedia library date ORKL

    Archived copy on ORKL Details

  22. Possible supply chain attack targeting South Asian government delivers Shadowpad

    Malpedia library date ORKL

    Archived copy on ORKL Details

  23. Carderbee Targets Hong Kong in Supply Chain Attack

    Malpedia library date ORKL

    Archived copy on ORKL Details

  24. My Tea’s not cold. An overview of China’s cyber threat

    Malpedia library date ORKL

    Archived copy on ORKL Details

  25. Carderbee: APT Group use Legit Software in Supply Chain Attack Targeting Orgs in Hong Kong

    Malpedia library date ORKL

    Archived copy on ORKL Details

  26. RedHotel: A Prolific, Chinese State-Sponsored Group Operating at a Global Scale

    Malpedia library date ORKL

    Archived copy on ORKL Details

  27. Possible Supply Chain Attack Targeting Pakistani Government Delivers Shadowpad

    Malpedia library date ORKL

    Archived copy on ORKL Details

  28. The Spies Who Loved You: Infected USB Drives to Steal Secrets | Mandiant

    Malpedia library date ORKL

    Archived copy on ORKL Details

  29. Chinese Threat Actors Targeting Europe in SmugX Campaign

    Malpedia library date ORKL

    Archived copy on ORKL Details

  30. Lancefly: Group Uses Custom Backdoor to Target Orgs in Government, Aviation, Other Sectors

    Malpedia library date ORKL

    Archived copy on ORKL Details

  31. New Mustang Panda’s campaing against Australia

    Malpedia library date ORKL

    Archived copy on ORKL Details

  32. Botconf2022-19-FaouCoteCyr.pdf

    Malpedia library date ORKL

    Archived copy on ORKL Details

  33. With KEYPLUG, China’s RedGolf Spies On, Steals From Wide Field of Targets

    Malpedia library date ORKL

    Archived copy on ORKL Details

  34. PlugX Malware Being Distributed via Vulnerability Exploitation

    Malpedia library date ORKL

    Archived copy on ORKL Details

  35. Investigating the PlugX Trojan Disguised as a Legitimate Windows Debugger Tool

    Malpedia library date ORKL

    Archived copy on ORKL Details

  36. Mustang Panda APT Group Uses European Commission-Themed Lure to Deliver PlugX Malware

    Malpedia library date ORKL

    Archived copy on ORKL Details

  37. Chinese PlugX Malware Hidden in Your USB Devices?

    Malpedia library date ORKL

    Archived copy on ORKL Details

  38. JSAC2023_2_LT4.pdf

    Malpedia library date ORKL

    Archived copy on ORKL Details

  39. [QuickNote] Another nice PlugX sample

    Malpedia library date ORKL

    Archived copy on ORKL Details

  40. Diving into a PlugX sample of Mustang Panda group

    Malpedia library date ORKL

    Archived copy on ORKL Details

  41. RedDelta Targets European Government Organizations and Continues to Iterate Custom PlugX Variant

    Malpedia library date ORKL

    Archived copy on ORKL Details

  42. Secure Communications Blog

    Malpedia library date ORKL

    Archived copy on ORKL Details

  43. Hitching a ride with Mustang Panda

    Malpedia library date ORKL

    Archived copy on ORKL Details

  44. PlugXローダーの進化

    Malpedia library date ORKL

    Archived copy on ORKL Details

  45. Secure Communications Blog

    Malpedia library date ORKL

    Archived copy on ORKL Details

  46. Witchetty: Group Uses Updated Toolset in Attacks on Governments in Middle East

    Malpedia library date ORKL

    Archived copy on ORKL Details

  47. Hunting for Unsigned DLLs to Find APTs

    Malpedia library date ORKL

    Archived copy on ORKL Details

  48. Dissecting PlugX to Extract Its Crown Jewels

    Malpedia library date Ido Naor ORKL

    Archived copy on ORKL Details

  49. New Wave of Espionage Activity Targets Asian Governments

    Malpedia library date ORKL

    Archived copy on ORKL Details

  50. MustangPanda%20-%20Enemy%20at%20the%20gate_final.pdf

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  51. THREAT ANALYSIS REPORT: PlugX RAT Loader Evolution

    Malpedia library date ORKL

    Archived copy on ORKL Details

  52. Attacks on industrial control systems using ShadowPad | Kaspersky ICS CERT EN

    Malpedia library date ORKL

    Archived copy on ORKL Details

  53. Operation Earth Berberoka: An Analysis of a Multivector and Multiplatform APT Campaign Targeting Online Gambling Sites

    Malpedia library date ORKL

    Archived copy on ORKL Details

  54. China-based APT Mustang Panda might still have continued their attack activities against organizations in

    Malpedia library date VinCSS ORKLCCS '25 data

    Archived copy on ORKL Details

  55. Space Pirates: analyzing the tools and connections of a new hacker group

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  56. HUI Loaderの分析 - JPCERT/CC Eyes

    Malpedia library date ORKL

    Archived copy on ORKL Details

  57. AS-22-LeonSilvia-NextGenPlugXShadowPad.pdf

    Malpedia library date ORKL

    Archived copy on ORKL Details

  58. Mustang Panda deploys a new wave of malware targeting Europe

    Malpedia library date ORKL

    Archived copy on ORKL Details

  59. Moshen Dragon’s Triad-and-Error Approach | Abusing Security Software to Sideload PlugX and ShadowPad

    Malpedia library date ORKL

    Archived copy on ORKL Details

  60. Chinese APT Bronze President Mounts Spy Campaign on Russian Military

    Malpedia library date ORKL

    Archived copy on ORKL Details

  61. yir-cyber-threats-annex-download.pdf

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  62. Botconf2022-40-LunghiHorejsi.pdf

    Malpedia library date ORKL

    Archived copy on ORKL Details

  63. https://documents.trendmicro.com/assets/txt/earth-berberoka-windows-iocs-2.txt

    Malpedia library date ORKL

    Archived copy on ORKL Details

  64. New APT Group Earth Berberoka Targets Gambling Websites With Old and New Malware

    Malpedia library date ORKL

    Archived copy on ORKL Details

  65. Hacking activity of SectorB Group in 2021 – Red Alert

    Malpedia library date ORKL

    Archived copy on ORKL Details

  66. Ghidra script to handle stack strings – Max Kersten

    Malpedia library date ORKL

    Archived copy on ORKL Details

  67. Mustang Panda's Hodur : Vieux trucs, nouvelle variante de Korplug

    Malpedia library date ORKL

    Archived copy on ORKL Details

  68. Chinese APT Combines Fresh Hodur RAT with Complex Anti-Detection

    Malpedia library date ORKL

    Archived copy on ORKL Details

  69. New Mustang Panda hacking campaign targets diplomats, ISPs

    Malpedia library date ORKL

    Archived copy on ORKL Details

  70. Mustang Panda’s Hodur: Old tricks, new Korplug variant

    Malpedia library date ORKL

    Archived copy on ORKL Details

  71. TA416: Activity, Techniques, & Targeting Explained | Proofpoint US

    Malpedia library date ORKL

    Archived copy on ORKL Details

  72. Adam Kozy Testimony

    Malpedia library date Adam Kozy ORKL

    Archived copy on ORKL Details

  73. A “GULP” of PlugX

    Malpedia library date ORKL

    Archived copy on ORKL Details

  74. Threat Spotlight: BlackMatter, LockBit, and THOR - Cisco Umbrella

    Malpedia library date ORKL

    Archived copy on ORKL Details

  75. Microsoft Word - exorcist whitepaper.docx

    Malpedia library date ORKL

    Archived copy on ORKL Details

  76. 4 Chinese APT Groups Identified Targeting Mail Server of Afghan Telecommunications Firm Roshan

    date in the title ORKL

    The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Details

  77. 4 Chinese APT Groups Identified Targeting Mail Server of Afghan Telecommunications Firm Roshan

    date in the CCS '25 data Recorded Future CCS '25 data

    The original link failed its last check. Details

  78. Indonesian intelligence agency compromised in suspected Chinese hack

    Malpedia library date ORKL

    Archived copy on ORKL Details

  79. D1T1%20-%20%20ShadowPad%20-%20A%20Masterpiece%20of%20Privately%20Sold%20Malware%20in%20Chinese%20Espionage%20-%20Yi-Jhen%20Hsieh%20&%20Joey%20Chen.pdf

    Malpedia library date ORKL

    Archived copy on ORKL Details

  80. THOR: Previously Unseen PlugX Variant Deployed During Microsoft Exchange Server Attacks by PKPLUG Group

    Malpedia library date ORKL

    Archived copy on ORKL Details

  81. LuminousMoth – PlugX, File Exfiltration and Persistence Revisited

    Malpedia library date ORKL

    Archived copy on ORKL Details

  82. Attacks Against the Government Sector (White Paper)

    Malpedia library date ORKL

    Archived copy on ORKL Details

  83. Threat Activity Group RedFoxtrot Linked to China’s PLA Unit 69010; Targets Bordering Asian Countries

    Malpedia library date ORKL

    Archived copy on ORKL Details

  84. eset_threat_report_t12021.pdf

    Malpedia library date ORKL

    Archived copy on ORKL Details

  85. RedDelta PlugX Undergoing Changes and Overlapping Again with Mustang Panda PlugX Infrastructure

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  86. eset_threat_report_t12021

    file creation date ORKL

    The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Details

  87. Mustang Panda PlugX - 45.251.240.55 Pivot

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  88. PowerPoint 簡報

    Malpedia library date ORKL

    Archived copy on ORKL Details

  89. RedEcho group parks domains after public exposure

    Malpedia library date ORKL

    Archived copy on ORKL Details

  90. Exchange servers under siege from at least 10 APT groups

    Malpedia library date ORKL

    Archived copy on ORKL Details

  91. Exchange servers under siege from at least 10 APT groups

    date in the title ORKL

    The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Details

  92. Microsoft Exchange Zero Days - Mitigations and Detections

    date in the title ORKL

    The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Details

  93. China-Linked Group RedEcho Targets the Indian Power Sector Amid Heightened Border Tensions

    Malpedia library date ORKL

    Archived copy on ORKL Details

  94. Cyber Threats 2020: A Year in Retrospect

    Malpedia library date ORKL

    Archived copy on ORKL Details

  95. Report2021GTR.pdf

    Malpedia library date ORKL

    Archived copy on ORKL Details

  96. Investigation into PlugX Uncovers Unique APT Technique

    Malpedia library date ORKL

    Archived copy on ORKL Details

  97. CRACKING A SOFT CELL IS HARDER THAN YOU THINK

    Malpedia library date ORKL

    Archived copy on ORKL Details

  98. Higaisa or Winnti? APT41 backdoors, old and new

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  99. China's APT hackers move to ransomware attacks

    Malpedia library date ORKL

    Archived copy on ORKL Details

  100. China cyber attacks- the current threat landscape

    date in the title ORKL

    The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Details

  101. Operation StealthyTrident: corporate software under attack

    Malpedia library date ORKL

    Archived copy on ORKL Details

  102. APT group targeting governmental agencies in East Asia

    Malpedia library date ORKL

    Archived copy on ORKL Details

  103. TA416's Golang PlugX Malware Loader | Proofpoint US

    Malpedia library date ORKL

    Archived copy on ORKL Details

  104. Weaponizing Open Source Software for Targeted Attacks

    Malpedia library date ORKL

    Archived copy on ORKL Details

  105. APT trends report Q3 2020

    Malpedia library date ORKL

    Archived copy on ORKL Details

  106. APT41: Indictments Put Chinese Espionage Group in the Spotlight

    Malpedia library date Symantec ORKLCCS '25 data

    Archived copy on ORKL Details

  107. Back Despite Disruption: RedDelta Resumes Operations

    Malpedia library date Insikt Group® ORKL

    Archived copy on ORKL Details

  108. Research Roundup: Activity on Previously Identified APT33 Domains | ThreatConnect

    Malpedia library date ThreatConnect ORKLCCS '25 data

    Archived copy on ORKL Details

  109. cybersecurity-threatscape-2020-q2-eng

    file creation date ORKL

    The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Details

  110. ESET_Threat_Report_Q22020.pdf

    Malpedia library date ORKL

    Archived copy on ORKL Details

  111. APT trends report Q2 2020

    Malpedia library date ORKL

    Archived copy on ORKL Details

  112. What even is Winnti? - Risky Business Media

    Malpedia library date ORKL

    Archived copy on ORKL Details

  113. Chinese state hackers target Hong Kong Catholic Church

    Malpedia library date ORKL

    Archived copy on ORKL Details

  114. Accenture | Let there be change

    Malpedia library date ORKL

    Archived copy on ORKL Details

  115. Cycldek: Bridging the (air) gap

    Malpedia library date ORKL

    Archived copy on ORKL Details

  116. Mustang Panda Recent Activity: Dll-Sideloading trojans with temporal C2 servers

    Malpedia library date ORKL

    Archived copy on ORKL Details

  117. Mikroceen: Spying backdoor leveraged in high-profile networks in Central Asia

    Malpedia library date ORKL

    Archived copy on ORKL Details

  118. APT group planted backdoors targeting high profile networks in Central Asia

    Malpedia library date ORKL

    Archived copy on ORKL Details

  119. The energy reserves in the Eastern Mediterranean Sea and a malicious campaign of APT10 against Turkey

    Malpedia library date Lab52 ORKLCCS '25 data

    Archived copy on ORKL Details

  120. 200407-MWB-COVID-White-Paper_Final

    date in the CCS '25 data Malwarebytes ORKLCCS '25 data

    The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Details

  121. COVID-19 Themes Are Being Utilized by Threat Actors of Varying Sophistication

    Malpedia library date ORKL

    Archived copy on ORKL Details

  122. Phân tích mã độc lợi dụng dịch Covid-19 để phát tán giả mạo “Chỉ thị của thủ tướng Nguyễn Xuân Phúc” - Phần

    Malpedia library date ORKL

    Archived copy on ORKL Details

  123. Is APT 27 Abusing COVID-19 To Attack People !

    date in the CCS '25 data Yoroi CCS '25 data

    The original link failed its last check. Details

  124. Vicious Panda: The COVID Campaign

    Malpedia library date ORKL

    Archived copy on ORKL Details

  125. Phân tích mã độc lợi dụng dịch Covid-19 để phát tán giả mạo “Chỉ thị của thủ tướng Nguyễn Xuân Phúc” - Phần 1 - VinCSS Blog

    Malpedia library date ORKL

    Archived copy on ORKL Details

  126. the adversary playbook for the long-standing espionage activity of a Chinese nation-state adversary

    Malpedia library date ORKL

    Archived copy on ORKL Details

  127. Operation DRBControl: Uncovering a Cyberespionage Campaign Targeting Gambling Companies in Southeast Asia

    Malpedia library date ORKL

    Archived copy on ORKL Details

  128. CLAMBLING - A New Backdoor Base On Dropbox (EN)

    Malpedia library date ORKL

    Archived copy on ORKL Details

  129. Microsoft Word - Threat Intelligence and the Limits of Malware Analysis_smc1.docx

    Malpedia library date ORKL

    Archived copy on ORKL Details

  130. Fresh PlugX October 2019

    Malpedia library date ORKL

    Archived copy on ORKL Details

  131. APT cases exploiting vulnerabilities in region‑specific software

    Malpedia library date ORKL

    Archived copy on ORKL Details

  132. Calypso APT- new group attacking state institutions

    date in the title ORKL

    The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Details

  133. Analytics

    Malpedia library date Positive Technologies ORKLCCS '25 data

    The original link failed its last check. Original publisher Details

  134. Calypso APT: new group attacking state institutions

    date in the CCS '25 data Positive Technologies CCS '25 data

    The link to Mirror on Box failed its last check. Details

  135. Calypso APT: new group attacking state institutions

    file creation date Positive Technologies ORKL

    The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Details

  136. calypso-apt-2019-rus.pdf

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  137. New threat group behind Airbus cyber attacks, claim researchers

    Malpedia library date ORKL

    Archived copy on ORKL Details

  138. PKPLUG: Chinese Cyber Espionage Group Attacking Southeast Asia

    Malpedia library date ORKL

    Archived copy on ORKL Details

  139. Into the Fog - The Return of ICEFOG APT

    Malpedia library date ORKL

    The title opens a link whose publisher is not confirmed. Archived copy on ORKL Details

  140. Uncovering New Activity By APT10 | FortiGuard Labs

    Malpedia library date ORKL

    Archived copy on ORKL Details

  141. SectorM04 Targeting Singapore – An Analysis – Red Alert

    Malpedia library date ORKL

    Archived copy on ORKL Details

  142. Operation Red Signature Targets South Korean Companies

    Malpedia library date ORKL

    Archived copy on ORKL Details

  143. Malicious document targets Vietnamese officials

    Malpedia library date ORKL

    Archived copy on ORKL Details

  144. Malware Analysis – PlugX – Part 2

    Malpedia library date ORKL

    Archived copy on ORKL Details

  145. Time of death? A therapeutic postmortem of connected medicine

    Malpedia library date ORKL

    Archived copy on ORKL Details

  146. Malware Analysis – PlugX

    Malpedia library date ORKL

    Archived copy on ORKL Details

  147. PlugXと攻撃者グループ "DragonOK"の関連性 | LAC WATCH

    Malpedia library date ORKL

    Archived copy on ORKL Details

  148. Threat Actors Target Government of Belarus Using CMSTAR Trojan

    Malpedia library date ORKL

    Archived copy on ORKL Details

  149. Threat Actors Target Government of Belarus Using CMSTAR Trojan

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  150. Paranoid PlugX

    Malpedia library date ORKL

    Archived copy on ORKL Details

  151. Intrusions Affecting Multiple Victims Across Multiple Sectors | CISA

    Malpedia library date ORKL

    Archived copy on ORKL Details

  152. RedLeaves - Malware Based on Open Source RAT - JPCERT/CC Eyes

    Malpedia library date ORKL

    Archived copy on ORKL Details

  153. Unpacking the spyware disguised as antivirus | Malwarebytes Labs

    Malpedia library date ORKL

    Archived copy on ORKL Details

  154. security_report_20160613.pdf

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  155. Targeted Attack Distributes PlugX in Russia | Proofpoint US

    Malpedia library date ORKL

    Archived copy on ORKL Details

  156. Uncovering the Seven Pointed Dagger

    Malpedia library date Arbor Networks ORKLCCS '25 data

    The link to Mirror on Box failed its last check. Mirror on Box Details

  157. BKDR_RARSTONE: New RAT to Watch Out For - TrendLabs Security Intelligence Blog

    Malpedia library date ORKL

    The title opens Wayback Machine, not the publisher’s page. Archived copy on ORKL Details

Newest first. Details opens the report in Explore.