U.S. law enforcement has deleted over 4,000 instances of malware from the Chinese-backed group, Twill Typhoon. The “PlugX” malware, used in cyberespionage operations, was removed after European partners gained control of its server. The malware infects computers via USB drives and was discovered on over 4,000 American computers. A French cybersecurity company assisted US law enforcement in the operation.

LockBit ransomware group falls victim to hackers itself
A data leak has disclosed information about negotiations with victims, Bitcoin wallet addresses, affiliate accounts, and details of attacks.