China-nexus Threat Actor Targets Persian Gulf Region With PlugX

Reported 16 Mar 2026 by otx · Severity: medium

A China-nexus threat actor targeted countries in the Persian Gulf region using a multi-stage attack chain to deploy a PlugX backdoor variant. The campaign exploited the renewed Middle East conflict, using an Arabic-language document lure depicting missile attacks. The attack util