Research / America discovered China's hacking tool 'Duxin', Biden administration taking seriously

US-based cyber security company Symantec has discovered a hacking tool from China that has evaded public attention for more than a decade. According to the company's security researchers, this discovery has recently been shared with the US government. The tool, published by researchers on Monday, has been named 'Duxin'.

Symantec is a division of chip maker Broadcom in the US, and the Biden administration is seeing its research with very serious consequences. "This is something we haven't seen before," said Clayton Romance, associate director of the US Cybersecurity Infrastructure Security Agency (CISA). This is exactly the type of information we are hoping to get.

The Chinese embassy in Washington did not comment on questions related to the revelations. Chinese officials have already been saying that China is also a victim of hacking and opposes all kinds of cyber attacks. According to Neil Jenkins, Chief Analyst Officer for Cyber ​​Threats, the capabilities of this malware are remarkable and extremely difficult to detect without this public research.

'Duxin' can be controlled from anywhere

The most recent known attacks involving Duxin occurred in November 2021, the research report said. Duxin's capabilities suggest that attackers put significant effort into developing communication techniques that could get along with normal network traffic without getting caught up. Duxin's victims included high-level, non-governmental agencies in Asia and Africa, including the Ministry of Justice. Once the computer is infected, says Thakur, Duxin can be controlled from anywhere in the world.

Vikram Thakur is the technical director of Symantec

The federal government also pays attention to the report of 'Symantec' in America. Its technical director is Indian-American Vikram Thakur. He says the allegations against China are based on instances where components of Duxin were combined with other known, Chinese computer hacker infrastructure or cyberattacks. The discovery is important because of the scale of computer intrusions and the advanced nature of the equipment, the researchers said.