Diamond Member ThaHaka 0 Posted November 19, 2025 Diamond Member Share Posted November 19, 2025 This is the hidden content, please Sign In or Sign Up The threat actor known as PlushDaemon has been observed using a previously undocumented Go-based network ********* codenamed EdgeStepper to facilitate adversary-in-the-middle (AitM) attacks. EdgeStepper "redirects all DNS queries to an external, malicious ********** node, effectively rerouting the traffic from legitimate infrastructure used for software updates to attacker-controlled infrastructure This is the hidden content, please Sign In or Sign Up 0 Quote Link to comment https://hopzone.eu/forums/topic/289045-h4ckn3wsedgestepper-implant-reroutes-dns-queries-to-deploy-malware-via-hijacked-software-updates/ Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.