Tag: pkplug
-
VB2019 paper: Pulling the PKPLUG: the adversary playbook for the long-standing espionage activity of a Chinese nation state adversary
PKPLUG is the name used by Palo Alto Networks ’ Unit 42 team for a China-based threat actor engaged in cyber espionage. The actor uses both off-the-shelf and custom-made malware and some of its infrastructure overlaps with other threat groups. The group’s activities were detailed in a VB2019 paper by Unit 42 ’s Alex Hinchliffe,…