GoFrame Framework

Tool

Threat entity extracted from intelligence sources

Frequency

1

occurrences

First Seen

November 20, 2025

Last Seen

November 20, 2025

PlushDaemon is described as a China-linked threat actor.

Overview

Recent Events

Relationships

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Related Clusters (2)

PlushDaemon Hackers Exploit EdgeStepper Tool for Software Update Hijacking

Nov 19·9 sources

PlushDaemon Hackers Use EdgeStepper to Hijack Software Updates

Nov 20·9 sources

Related Articles (1)

China‑linked PlushDaemon hijacks DNS via ‘EdgeStepper’ to weaponize software updates

Csoonline·Nov 20

Related Entities

PlushDaemon Man-in-the-Middle Supply Chain Attack China New Zealand Taiwan DaemonicLogistics EdgeStepper LittleDaemon SlowStepper Adversary-in-the-Middle Juniper Routers