Crucially, Symantec’s threat researchers observed the use of a custom version of the PlugX backdoor previously deployed by a ...