Daxin Rootkit Resurfaces in Taiwan Alongside Novel Stupig Pre-Logon Backdoor
An advanced malware previously attributed to a China-linked threat actor has resurfaced after more than four years within a Taiwan manufacturing firm,…
Tag: kernel-mode
Daxin Kernel-Mode Rootkit: Advanced Cyber Espionage Tool
Daxin (srt64.sys) is a kernel-mode rootkit first documented by Symantec in March 2022, used in targeted attacks since 2013. It monitors incoming…
TONESHELL: Kernel-Mode Enhanced Backdoor
TONESHELL is a backdoor associated with China-nexus threat actors, notable for its kernel-mode driver enhancements that improve stealth and persistence. It has…