UNC6384 Chinese Hackers Use Valid Code Signing Certificates to Bypass Security
In early 2025, a covert cyber-espionage campaign targeted diplomats and government organizations across Southeast Asia and other regions. At the core of this operation is STATICPLUGIN, a downloader cleverly disguised as a legitimate Adobe plugin update. Malicious Redirect via Captive Portal Victims experienced a captive portal hijack, redirecting browsers to malicious domains. The landing page, […]
UNC6384 Chinese Hackers Use Valid Code Signing Certificates to Bypass Security Read More »




