China-Linked Daxin Backdoor Resurfaces in Taiwan Alongside New STUPIG SYSTEM

Gbhackers •Mayura Kathir • July 16, 2026

The China-linked Daxin backdoor has resurfaced in an active intrusion targeting a Taiwan-based subsidiary of a multinational high-tech manufacturer, exposing the enduring reach of an espionage operation first publicly detailed in 2022. Daxin’s return is significant because the malware was already regarded as an unusually sophisticated implant built for stealthy, long-term access to hardened networks. […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Daxin Malware and New Backdoor Stupig Resurface in Taiwan Daxin, a sophisticated backdoor linked to China, has reappeared in Taiwan, targeting a multinational high-tech manufacturer. Discovered in May 2026, it operates stealthily by hijacking legitimate TCP connections for command and control. Alongside Daxin, a new backdoor named Stupig was identified, exhibiting unique persistence techniques. Both tools share compile timestamps from early 2013, suggesting they may have been developed by the same actor. The initial access point was likely an outdated Digiwin single sign-on portal using obsolete Java Development Kit versions. The compromised host had no telemetry prior to May 12, indicating a long-term undetected presence. The resurgence of these tools highlights ongoing espionage operations against strategic targets in Taiwan. 6 sources 76

Extracted Entities

China-Linked Daxin Backdoor Resurfaces in Taiwan Alongside New STUPIG SYSTEM

The full story

Extracted Entities

Attack Types (1)

Countries (1)

Malware (2)