PlushDaemon
Linked to China by three sources.
Reports per quarter
Techniques seen in the last two years
- T1659 3 reports
- T1016 2 reports
- T1027.009 2 reports
- T1027.013 2 reports
- T1036.005 2 reports
- T1057 2 reports
- T1070.004 2 reports
- T1190 2 reports
- T1583.001 2 reports
- T1583.004 2 reports
Show all 65 techniques Show fewer
- T1608.001 2 reports
- T1005 1 report
- T1008 1 report
- T1012 1 report
- T1016.002 1 report
- T1020 1 report
- T1027.007 1 report
- T1033 1 report
- T1036.008 1 report
- T1041 1 report
- T1059.003 1 report
- T1059.006 1 report
- T1071.001 1 report
- T1071.004 1 report
- T1074.001 1 report
- T1082 1 report
- T1083 1 report
- T1090 1 report
- T1091 1 report
- T1095 1 report
- T1104 1 report
- T1105 1 report
- T1106 1 report
- T1112 1 report
- T1113 1 report
- T1120 1 report
- T1123 1 report
- T1125 1 report
- T1132.001 1 report
- T1189 1 report
- T1195 1 report
- T1195.002 1 report
- T1204.004 1 report
- T1217 1 report
- T1219 1 report
- T1222.001 1 report
- T1518 1 report
- T1518.001 1 report
- T1547.001 1 report
- T1547.004 1 report
- T1553.002 1 report
- T1560.002 1 report
- T1566.001 1 report
- T1566.002 1 report
- T1566.003 1 report
- T1573 1 report
- T1573.001 1 report
- T1583.002 1 report
- T1588.001 1 report
- T1588.002 1 report
- T1588.003 1 report
- T1588.005 1 report
- T1608.002 1 report
- T1614 1 report
- T1665 1 report
Counts come from technique IDs in the actor's report text.
CVEs named in reports
- CVE-2017-0144 KEV ransomware
- CVE-2023-36884 KEV ransomware
- CVE-2024-42009 KEV
- CVE-2024-9680 KEV ransomware
- CVE-2025-8088 KEV ransomware
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
Newest first. Details opens the report in Explore.