attack.s0013 | Detection.FYI

Potential PlugX Activity

Aug 12, 2024 · attack.s0013 attack.defense-evasion attack.t1574.002 detection.emerging-threats ·
Share on:

Detects the execution of an executable that is typically used by PlugX for DLL side loading starting from an uncommon location

Read More
PlugX DLL Search Order Hijacking Using Avast wsc_proxy (RedCanary Threat Detection Report)

May 10, 2023 · attack.s0013 ·
Share on:

Detects possible DLL Search Order hijacking using Avast antivirus wsc_proxy application. This technique is associated with PlugX. Part of the RedCanary 2023 Threat Detection Report.

Read More