Daxin Malware Resurfaces in Taiwan with Stupig Pre-Login Backdoor

A China-linked malware called Daxin, previously active since 2013, resurfaced in a Taiwan manufacturing firm alongside the Stupig backdoor, which enables pre-login SYSTEM-level command execution. The discovery highlights long-term stealthy persistence in targeted networks and the use of advanced evasion techniques.

An advanced malware previously attributed to a China-linked threat actor has resurfaced after more than four years within a Taiwan manufacturing firm, along with a previously unreported backdoor dubbed Stupig.

Daxin ("srt64.sys"), as the kernel-mode rootkit is referred to, was first documented by Broadcom-owned Symantec in March 2022, with evidence indicating its use in targeted attacks aimed

Read original article