PlugX malware deleted from thousands of systems by FBI

The FBI, working with international partners, seized control of a PlugX command-and-control IP, sinkholed the botnet, and remotely deleted the PlugX remote-access Trojan from thousands of infected Windows systems worldwide after attributing a version of the malware to PRC-backed actors. The report highlights PlugX's long-running development, its use to spy and install further malware (including activity by a group called "Velvet Ant" that abused compromised F5 BIG-IP appliances), and that affected users were notified via ISPs.