Tag: littledaemon

2 Attack Reports | 0 Vulnerabilities

Attack reports

Network devices compromised for adversary-in-the-middle attacks

China-aligned threat actor PlushDaemon has been conducting espionage operations since 2018, targeting entities in China, Taiwan, Hong Kong, Cambodia, South Korea, the United States, and New Zealand. The group employs a custom backdoor called SlowStepper and uses a network implant named EdgeStepper …

adversary-in-the-middle

software update hijacking

network implant

daemoniclogistics

Published: November 19, 2025

Downloadable IOCs: 4

PlushDaemon compromises network devices for adversary-in-the-middle attacks

China-aligned threat actor PlushDaemon has been conducting espionage operations since 2018, targeting entities in China, Taiwan, Hong Kong, Cambodia, South Korea, the United States, and New Zealand. The group employs a custom backdoor called SlowStepper and uses a network implant named EdgeStepper …

adversary-in-the-middle

software update hijacking

network implant

daemoniclogistics

Published: November 19, 2025

Downloadable IOCs: 7

Click here to see more Attack Reports