Chinese Cyberspies Target South Korean VPN in Supply Chain AttackBy rooter / January 22, 2025 Advanced persistent threat group PlushDaemon, active since 2019, is using a sophisticated modular backdoor to collect data from infected systems in South Korea.