FBI wipes Chinese PlugX malware from over 4,000 US computers

The U.S. Department of Justice and FBI, working with French law enforcement and security firm Sekoia, conducted a court-authorized operation that removed a PlugX RAT variant from roughly 4,258 U.S. computers; the malware—attributed to Mustang Panda/Twill Typhoon—had a wormable USB-spreading component, persistent registry-based autostart, and capabilities for file transfer, keystroke logging, and remote command execution, with C2 infrastructure (notably 45.142.166.112) showing widespread global connections.