Chinese PlushDaemon Hackers Exploit EdgeStepper Tool to Hijack Legitimate Updates and ...

Gbhackers • November 19, 2025

GBHackers on Security is a top cybersecurity news platform, delivering up-to-date coverage on breaches, emerging threats, malware, vulnerabilities, and global cyber incidents.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

PlushDaemon Hackers Exploit EdgeStepper Tool for Software Update Hijacking The Chinese hacking group PlushDaemon has been observed using a tool named EdgeStepper to hijack legitimate software updates, redirecting traffic to malicious servers. Active since at least 2018, PlushDaemon targets organizations globally, including the US, South Korea, and New Zealand, employing adversary-in-the-middle techniques to compromise network devices and conduct cyber espionage. 9 sources 28

Extracted Entities

Chinese PlushDaemon Hackers Exploit EdgeStepper Tool to Hijack Legitimate Updates and ...

The full story

Extracted Entities

APT Groups (1)

Attack Types (1)

Tools (1)