- What: PlugX malware is used in attacks via MSBuild and GDATA.
- Impact: Indicates targeted cyber operations by advanced threat actors.
2026-02-26 (Back to Inventory) PlugX Meeting Invitation via MSBuild and GDATA Author(s): Lab52 Organization: Lab52 win.plugx Open article directly Open article on Archive.org Related Articles 2025-09-03 ⋅ Lab52 ⋅ Lab52 Analyzing NotDoor: Inside APT28’s Expanding Arsenal GONEPOSTAL 2024-02-19 ⋅ Lab52 ⋅ Lab52 Pelmeni Wrapper: New Wrapper of Kazuar (Turla Backdoor) Pelmeni 2023-12-11 ⋅ Lab52 ⋅ 3722304989 , varit0 Mustang Panda’s PlugX new variant targetting Taiwanese government and diplomats DOPLUGS