Democracy in Hong Kong Under Attack

Volexity tracked coordinated strategic web compromises targeting pro-democracy websites in Hong Kong and components of the Japanese Nikkei site that delivered malicious JavaScript, Java Applets, and signed PlugX malware; the report documents webshell persistence, live exploit infrastructure (java-se.com and related hosts), C2 mechanisms (163.com blog-based commands and Linode IP 173.255.217.77), file hashes for main.dll/main64.dll and a signed PlugX sample, and recommends caution when visiting affected sites.