Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
high threatBackdoorMalware Family
Historical
PlugX
High severity
3.4k
IOCs Tracked
—
First Seen
—
Last Seen
0
YARA Rules
Associated IOCs3,410 total · showing 50
MD549
660ed7c15176fe5720e03d06f1d7878a2026-07-08High
93450689153d542cd52383b3297608212026-07-08High
689f24447e67e8aef41c362fb55af5982026-07-08High
e4428816c38db59c54e6fea2e50448f72026-07-08High
313e45cf274c709143e3803e7ee222c32026-07-08High
30d863880a4af782388a85c43b0aa3b22026-07-09High
e381459b568962a3843814f5860f7cba2026-07-08High
1197730bd6c8467d85d9a33561cdea082026-07-08High
580f3b3145c207c9711636f5457467372026-07-08High
b84c3476c63b2caac2016f171a0ade4c2026-07-08High
dd5656ff62cd585f1bdb13a7ef97216a2026-07-08High
3d7e39e250a7999bea40388b423fa0cd2026-07-08High
95aee7077b5b53fbe3ec9cb7025065f12026-07-08High
a4ae57995d5a2416995da0346f09a26c2026-07-08High
56de4979eb19d27e7756f5e83080f5c92026-07-08High
ea97e3186e0a979202a26ba212f7fac72026-07-09High
fa0bb7c0fb02a88df55a05a0cf529d222026-07-08High
d1e53fb1ceeb4c900fc4650b8f1e68db2026-07-08High
02c15179d4f55ae91eb79b39150f59c72026-07-08High
ddc9fdaf5a150503ca693d342e2abfe42026-07-08High
Related Reports30 shown
HoneyMyte CoolClient Rootkit Hooks Windows Nsiproxy to Conceal C2 Addresses
Cyber PressAug 17, 2026
APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit
SecurelistAug 14, 2026
Fake Roblox Cheat Streams Victims’ Desktops Every 500 Milliseconds
Cyber PressAug 6, 2026
OctLurk and SilkLurk: newly identified tailored backdoors in cyber-espionage campaign in Central Asia
SecurelistJul 30, 2026
Abuse.ch MalwareBazaar (675 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (685 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (696 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (694 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (697 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (696 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (716 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (734 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (760 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (776 samples)
Abuse.ch MalwareBazaar
Maltrail IOC for 2026-07-13
CIRCL OSINT FeedJul 13, 2026
Abuse.ch MalwareBazaar (786 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (804 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (781 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (792 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (779 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (769 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (765 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (787 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (793 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (804 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (817 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (811 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (803 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (796 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (865 samples)
Abuse.ch MalwareBazaar
Threat Profile
TypeBackdoor
StatusHistorical
IOCs tracked3,410