A variant of the PlugX RAT (remote access tool) has been discovered to use a Dropbox account to update the settings for the command and control server. Researchers at Trend Micro found that the new variant of the malware targets a government agency in Taiwan and that it contains some modifications compared to previous known versions. The investigation revealed that the fresh sample comes with a changed header, most likely in order to prevent forensic analysis. It also has an authentication c…
Comments are closed.
