PlushDaemon — Threat Actor Profile, Campaigns & Targets

Threat entity extracted from intelligence sources

Frequency
10
occurrences
First Seen
November 19, 2025
Last Seen
December 16, 2025

Related Threat Clusters

Recent Intelligence Reports

  • ESET Threat Report: AI-driven attacks on the rise; NFC — Globenewswire · December 16, 2025
  • Weaponized file name flaw allows RCE through glob — Theregister · November 23, 2025
  • Weaponized file name flaw makes updating glob an urgent job — Theregister · November 23, 2025
  • New EdgeStepper implant leveraged in PlushDaemon supply chain compromise — Scworld · November 20, 2025
  • PlushDaemon Hackers in China Deploy EdgeStepper to Corrupt Software Updates and ... — Cyberpress · November 20, 2025
  • China‑linked PlushDaemon hijacks DNS via 'EdgeStepper' to weaponize software updates — Csoonline · November 20, 2025
  • China‑linked PlushDaemon hijacks DNS via ‘EdgeStepper’ to weaponize software updates — Csoonline · November 20, 2025
  • Chinese PlushDaemon Hackers Exploit EdgeStepper Tool to Hijack Legitimate Updates and ... — Gbhackers · November 19, 2025

CVSS v3.1 Breakdown