Security News UNC6384 Deploys PlugX via Captive Portal Hijacks and Valid Certificates Targeting Diplomats TheHackerNews Daniel Bender Aug 25, 2025 UNC6384 hijacked captive portals in March 2025 to deploy PlugX malware, advancing PRC cyber-espionage goals.
