November 19, 2025 at 11:00 AM #1 EdgeStepper Implant Reroutes DNS Queries to Deploy Malware via Hijacked Software Updates PlushDaemon hijacks software updates using EdgeStepper to redirect DNS traffic and deploy SlowStepper malware. thehackernews.com