SmugX
SmugX is a China-attributed threat actor group, tracked by Brandefense. It targets organisations in 3 countries, including Czechia and Hungary.
- Origin
- China
- Techniques
- 0
- Exploited CVEs
- No CVE data
- First seen
- Dec 1, 2022
- Record updated
Who They Target.
Arsenal · Malware And Tools.
- PlugXmalware
About SmugX.
The campaign, called SmugX, overlaps with previously reported activity by Chinese APT actors RedDelta and Mustang Panda. Although those two correlate to some extent with Camaro Dragon, there is insufficient evidence to link the SmugX campaign to the Camaro Dragon group. The campaign uses new delivery methods to deploy (most notably, HTML Smuggling) a new variant of PlugX, an implant commonly associated with a wide variety of Chinese threat actors. Although the payload itself remains similar to the one found in older PlugX variants, its delivery methods results in low detection rates, which until recently helped the campaign fly under the radar.
Last updated Oct 19, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.