PlugX Mustang Panda C2 Connection to fruitbrat.com

Kaung Khant Ko@kaungkhantko

•updated Jun 9, 2026•3•0•17

Detects network connections to the primary C2 domain (fruitbrat.com) used by the Mustang Panda PlugX variant in this campaign. Specifically flags HTTPS connections to this domain.