China’s PlushDaemon group uses EdgeStepper implant to infect network devices with SlowStepper malware in global supply-chain attacks

Robotic mask face with electronic wires in a sci-fi technology or artificial intelligence network concept.

• China-aligned PlushDaemon deploys malware through compromised routers
• PlushDaemon deploys LittleDaemon and DaemonLogistics on network devices
• The final payload, SlowStepper, can run commands and deploy spyware

China-aligned hacking group PlushDaemon has been spotted by ESET targeting routers and other network devices with malware to launch supply chain attacks.