New PlugX USB Worm Spreads Across Multiple Continents Using DLL Sideloading

Cybersecuritynews •Tushar Subhra Dutta • April 14, 2026

A newly discovered variant of the PlugX worm is silently crossing borders by hiding inside USB drives, and it has already been detected on multiple continents spanning nearly ten time zones. First spotted in Papua New Guinea in August 2022, the worm resurfaced in January 2023 in both Papua New Guinea and Ghana — two […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

PlugX USB Worm Variant Spreads Globally via DLL Sideloading A new variant of the PlugX USB worm is causing infections across multiple continents, utilizing DLL sideloading and USB-based propagation techniques to remain undetected. Initially identified in Papua New Guinea in August 2022, this worm has since re-emerged in January 2023 in both Papua New Guinea and Ghana, and has been reported in several other countries including Mongolia, Zimbabwe, and Nigeria. The worm's stealthy nature and widespread reach, spanning nearly ten time zones, indicate a significant threat to organizations globally. The exact number of infections is currently unknown, but the worm's ability to evade detection raises concerns about its potential impact on critical systems. Security professionals are advised to monitor for signs of infection and implement preventive measures against USB-based threats. 2 sources 61

Extracted Entities

New PlugX USB Worm Spreads Across Multiple Continents Using DLL Sideloading

The full story

Extracted Entities

Attack Types (1)

Countries (2)

Malware (1)

MITRE ATT&CK (1)