New PlugX variant Naikon/Backdoor DLL Hijacking

Kaung Khant Ko@kaungkhantko

•updated Sep 29, 2025•1•6•197

Detects the loading of a malicious 'pc2msupp.dll' via legitimate applications, a technique used by Naikon and BackdoorDiplomacy groups to load RainyDay, Turian, and a new PlugX variant.