to deploy the PlugX remote access trojan (RAT) malware and gain persistence on compromised systems

Wait it already requires a compromised system?

However, user interaction is required for successful exploitation, as it involves tricking potential victims into visiting a malicious page or opening a malicious file.

Yep! So it’s essentially just user error, with the user downloading a virus, which then lets attackers do other stuff. So…a virus.

They definitely made it sound more “fuck windows!” in the title though, which is nice hey?