• Rentlar
      link
      fedilink
      English
      17
      edit-2
      1 day ago

      In the article it reads that the FBI had taken over the server which the PlugX malware connects to. They had the server issue the command to machines that respond to PlugX remote requests, to have PlugX delete its own registry keys and generated files, then create a temporary script to uninstall PlugX and clean remaining traces, and finally run that script which deletes itself at the end.

        • @[email protected]
          link
          fedilink
          English
          2
          edit-2
          10 hours ago

          No send a signal to already infected devices with the control server of the bad actors them self.