Advanced Persistent Threat (APT) Actors Deploying Daxin Malware in Global Espionage Campaign

March 4, 2022
Unite IT

Broadcom Software—an industry member of CISA’s Joint Cyber Defense Collaborative (JCDC)— has outlined an advanced persistent threat (APT) campaign against critical infrastructure targets in a publication titled Daxin: Stealthy Backdoor Designed for Attacks Against Hardened Networks.

Part of Broadcom Software, the Symantec Threat Hunter team, worked with CISA to engage with organizations targeted with Daxin malware and assisted with detection and remediation.

Daxin malware is a sophisticated rootkit backdoor with complex, stealthy command and control (C2) functionality that enables remote actors to communicate with secure devices not connected directly to the internet.

Daxin appears to be optimized for use against hardened targets. It allows hackers to deeply burrow into targeted networks and exfiltrate data without raising suspicion.

CISA urges organizations to review Daxin: Stealthy Backdoor Designed for Attacks Against Hardened Networks for more information and for a list of indicators of compromise that may aid in the detection of this activity.

Report incidents related to this activity to CISA and/or the FBI via your local FBI field office or the FBI’s 24/7 CyWatch at (855) 292-3937 or

About Unite IT

Local, knowledgeable technicians available to respond rapidly onsite or assist your business remotely with hardware, software, networking, wireless or security needs.

Unite IT employs State of the art, integrated ticketing, security, remote monitoring and maintenance systems.

Our knowledgeable team of IT experts, coupled with a broad array of partnerships with other software and hardware companies around the globe, allow for an efficient, secure, and cost-effective solution, customized for each customer.

Get a Quote: Our Competitive Rates are designed to meet every IT budget.

Unite IT Services

Call: 888-748-8248


5267 Warner Ave #126
Huntington Beach,CA 92649
Customer Portal
(888) 748-8248

Interested In Our Security Updates?