Tag: zdi-can-25373

1 Attack Reports | 0 Vulnerabilities

Attack reports

UNC6384 Weaponizes ZDI-CAN-25373 Vulnerability to Deploy PlugX Against Hungarian and Belgian Diplomatic Entities

Chinese-affiliated threat actor UNC6384 is conducting a cyber espionage campaign targeting European diplomatic entities, particularly in Hungary and Belgium. The group exploits the ZDI-CAN-25373 Windows vulnerability to deliver PlugX malware through spearphishing emails with malicious LNK files. Th…
spearphishing
plugx
dll side-loading
canonstager
2025-10-31
diplomatic targeting
zdi-can-25373
Published: October 31, 2025
Downloadable IOCs: 26
Click here to see more Attack Reports