KEYPLUG Backdoor Linked to Sandman APT: Is This the Newest State-Sponsored Attack from China? First discovered in September 2023 by SentinelOne, KEYPLUG is found to be closely tied to Chinese state-sponsored hackers who are responsible for the launch of another threat dubbed Sandman. by Joseph Henry