French police push PlugX malware self-destruct payload to clean PCs

French law enforcement (C3N) with Europol and cybersecurity firm Sekoia are conducting a coordinated cleanup to remove a widely distributed PlugX remote access trojan that spread largely via infected USB drives; Sekoia sinkholed the botnet (reporting up to 2.5M unique connections and ~100k daily pings) and provided a disinfection solution (a PlugX plugin to self-delete and a proposed USB-scanning method) which is being deployed in France and partner countries beginning 18 July 2024 amid legal and safety concerns about remote remediation.