1. KeyPlug Server Exposes Fortinet Exploits & Webshell Activity Targeting a Major Japanese Company blog | 2025-04-17 00:00 | hunt.io | original ↗ | #exploitation | #apt41 | #fortinet
2. Suspected KEYPLUG Infrastructure: TLS Certificates and GhostWolf Links blog | 2025-01-23 00:00 | hunt.io | original ↗ | #threat-intelligence | #apt41 | #tls-certificates