DOPLUGS
- First seen
- 2014-01-01 00:00:00
- Malware type
- backdoor, trojan
- Family
- Malware family
- Profile updated
- 2026-07-07 13:05:25
Targeted industries: government-and-public-sector energy-and-utilities technology-and-telecommunications
Context
DOPLUGS is a backdoor Trojan often employed in cyber-espionage campaigns. It is known to target government and public sectors globally, allowing attackers to execute commands remotely and gain unauthorized access to systems.
Detection coverage
- 1 YARA rules
Detection rules
- MALPEDIA_Win_Doplugs_Auto (yara-rule)
Reports & references
- research.checkpoint.com — Chinese Threat Actors Targeting Europe In Smugx Campaign (report)
- go.recordedfuture.com — Cta 2022 1223 (report)
- secureworks.com — Bronze President Targets Russian Speakers With Updated Plugx (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Doplugs (report)
- Trend Micro — Earth Preta Campaign Targets Asia Doplugs (report)
- files.speakerdeck.com — Hodur Recon2024 (report)
- hunt.io — Darkpeony Certificate Patterns (report)
- lab52.io — Mustang Pandas Plugx New Variant Targetting Taiwanese Government And Diplomats (report)