C0047 RedDelta Modified PlugX Infection Chain Operations

active2023-07-01 – 2024-12-01

also known asRedDelta Modified PlugX Infection Chain Operations

RedDelta Modified PlugX Infection Chain Operations was executed by Mustang Panda from mid-2023 through the end of 2024 against multiple entities in East and Southeast Asia. RedDelta Modified PlugX Infection Chain Operations involved phishing to deliver malicious files or links to users prompting follow-on installer downloads to load PlugX on victim machines in a persistent state.

01

attributed to

The group this is attributed to.

02

techniques used (22)

ATT&CK techniques this enables or maps to.

03

software used (2)

Malware and tools associated with this.

04

source

Where this definition is published.

view on ATT&CK