Government ❯ Cybersecurity Policy ❯ Threat Mitigation ❯ Microsoft Defender
Researchers say the campaign deploys PlugX via a signed Canon utility using DLL sideloading.
