Daxin Resurfaces in Taiwan Alongside Stupig Pre-Login SYSTEM Backdoor

A sophisticated malware linked to a China-based threat actor has reappeared in Taiwan after a four-year absence, this time within a manufacturing company. The malware, known as Daxin or "srt64.sys", is a kernel-mode rootkit that was first documented by Symantec in 2022. It has resurfaced alongside a newly discovered backdoor called Stupig. Daxin was initially found to be used in targeted attacks. The backdoor Stupig is a pre-login SYSTEM backdoor, and its discovery is a new finding. Daxin's reappearance suggests continued interest in targeting specific organizations.