FBI Wipes Chinese Malware Off Thousands of American Computers

The Justice Department and fbi said on Tuesday that they had removed PlugX malware sponsored by China from over 4,200 computers and networks in the United States.

Hacked: According to a court filing, China paid hacking group Mustang Panda, also known as Twill Typhoon, to develop malware, like PlugX, to infect, control and steal information from foreign computers.

Since at least 2014, Mustang Panda hackers have infiltrated thousands of Windows-based computers in the U.S., Europe and Asia. The court filing explained:

The fbi’s multiyear investigation of Mustang Panda has confirmed that this group of computer hackers has infiltrated the computer systems of numerous government and private organizations, including in the United States. Significant foreign targets include European shipping companies in 2024, several European governments from 2021 to 2023, … worldwide Chinese dissident groups, and governments throughout the IndoPacific (e.g. Taiwan, Hong Kong, Japan, South Korea, Mongolia, India, Myanmar, Indonesia, Philippines, Thailand, Vietnam and Pakistan).

The court filing explains that the malware can easily spread to other computers through usb devices. Owners of infected computers often don’t know their device has been hacked.

Compromised: In September 2023, French private cybersecurity company Sekoia.io compromised the IP address PlugX used to communicate with Mustang Panda’s command-and-control server.

Since then, PlugX malware on U.S. devices may have tried contacting the hacking group’s server 45,000 different times, according to the court filing.

Deleted: In August 2024, the Justice Department and fbi obtained nine warrants authorizing them to use PlugX’s self-destruct command to remove it from devices in the U.S.

• A total of 4,258 American systems were cleansed of the malware before the final warrant expired on January 3.

Dependence: As the U.S. becomes increasingly dependent on cybertechnology for government, military, business and everyday purposes, China is becoming increasingly skilled at hacking that technology. Bible prophecy warns this dependence is dangerous.

Learn more: Read “China Hacks America—and ‘None Goes to Battle.’”