PlushDaemon’s Supply Chain Heist That Shook South Korea

Red | Attack Report
Download PDF

PlushDaemon, an elusive China-aligned APT group active since 2019, is making waves with its stealthy supply-chain attacks, including a bold 2023 operation targeting a South Korean VPN provider. Leveraging their custom backdoor, SlowStepper, a modular implant packed with over 30 components, the group demonstrates cutting-edge expertise in cyber espionage.

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox