Symantec finds 13 year old China linked malware in Taiwan factory

The article reports on the detection of the Daxin malware and Stupig backdoor at a Taiwan-based subsidiary of a multinational high-tech manufacturer, indicating a long-term cyber espionage effort linked to a China-linked group. The malware, discovered in May 2026, had been active for potentially 13 years, exploiting an outdated Java-based single sign-on portal. The Stupig backdoor disguises itself as a legitimate keyboard-layout library, allowing attackers to capture logon credentials without detection.

Symantec's findings stress the importance of vigilance against unexpected DLLs and retiring outdated software to prevent such intrusions. The discussion highlights ongoing concerns regarding cybersecurity in Taiwan's manufacturing sector.