The United States’ Cybersecurity and Infrastructure Security Agency (CISA) in conjunction with the threat hunting team from the security company Symantec have discovered rootkit malware that can quietly open backdoors into systems. This malware, called “Daxin”, has been linked with Chinese operations connected with the hacking group Middle Kingdom and may have been in circulation since 2013. Symantec and CISA consider Daxin, a serious threat and “nasty”.
Chinese malware targeted multiple governments • The Register