The threat group PlushDaemon uses routers and other network device implants to redirect domain name system (DNS) queries to malicious external servers which take over updates to unleash tools used for cyberespionage.
First seen on therecord.media
Jump to article: therecord.media/china-aligned-threat-actor-espionage-network-devices
