Official reports or press releases from cybersecurity firms

FBI and DOJ Remove PlugX Malware from 4,258 U.S. Computers in Operation Against China-Backed Hackers Mustang Panda and Twill Typhoon

Jan 14, 2025, 10:30 PM

The U.S. Department of Justice and the FBI, in collaboration with French law enforcement, have successfully executed a court-authorized operation to remove the PlugX malware from 4,258 computers in the United States. The malware, linked to the China-backed hacking groups Mustang Panda and Twill Typhoon, was used to infiltrate and control systems globally since at least 2014, targeting victims in the U.S., Europe, Asia, and Chinese dissident groups. The operation involved sending a self-delete command to the malware, which was facilitated by French authorities and cybersecurity firm Sekoia, who had previously gained access to the hackers' command and control server. The PlugX malware, sponsored by the People's Republic of China, spread through infected USB drives.