PlugX Malware Being Distributed via Vulnerability Exploitation

The ASEC (AhnLab Security Emergency response Center) has recently discovered the installation of the PlugX malware through the Chinese remote control programs Sunlogin and Awesun’s remote code execution vulnerability.

Sunlogin’s remote code execution vulnerability (CNVD-2022-10270 / CNVD-2022-03672) is still being used for attacks even now ever since its exploit code was disclosed. The team previously made a post about how Sliver C2, XMRig CoinMiner, and Gh0st RAT were being distributed through the Sunlogin RCE vulnerability. Additionally, since Gh0st RAT was …

ahnlab asec attacks awesun center chinese code code execution coinminer control distributed emergency exploit exploitation exploit code gh0st rat installation malware malware analysis plugx plugx malware rat remote code remote code execution response security sliver sunlogin team vulnerability vulnerability exploitation xmrig