Dismantling of the PlugX botnet: Sekoia contributes to an international disinfection operation

Following a report from Sekoia, a disinfection operation was launched by the French judicial authorities to dismantle the botnet controlled by the PlugX worm. PlugX affected several million victims worldwide. A disinfection solution developed by the Sekoia TDR team was proposed via Europol to partner countries and is being deployed at this time.We are pleased with the fruitful cooperation with the actors involved in France (section J3 of the Paris Public Prosecutor's Office, Police, Gendarmerie and ANSSI) and internationally (Europol and police forces of third countries) to take action against long-lasting malicious cyber activities.

To read our blogpost on PlugX: Unplugging PlugX: Sinkholing the PlugX USB worm botnet

‍The press release from the Paris prosecutor's office: https://www.linkedin.com/feed/update/urn:li:activity:7222119504518987778/

Press review:

Le Monde: https://www.lemonde.fr/societe/article/2024/07/25/cybercriminalite-une-operation-mondiale-de-desinfection-en-cours-et-une-enquete-ouverte-a-paris_6257778_3224.html

‍France Info: https://www.radiofrance.fr/franceinter/podcasts/l-info-de-france-inter/l-info-de-france-inter-6981382

‍France 24: https://www.france24.com/fr/éco-tech/20240725-cyberespionnage-une-opération-mondiale-de-désinfection-en-cours-enquête-menée-à-paris

‍ZDnet: https://www.zdnet.fr/non-classe/sekoia-debranche-le-malware-plugx-391122.htm‍

Bleeping Computer: https://www.bleepingcomputer.com/news/security/french-police-push-plugx-malware-self-destruct-payload-to-clean-pcs/