FBI deletes Chinese PlugX malware from thousands of US computers

The U.S. Department of Justice and FBI conducted a court-authorized operation that deleted the PlugX remote-access trojan from approximately 4,258 U.S. computers as part of an international takedown with French law enforcement and cybersecurity firm Sekoia; the report details PlugX's wormable USB spread, persistence (registry autorun), espionage use by Mustang Panda against governments, companies and dissidents globally, and sinkholing of a C2 server (45.142.166.112).