News Roundup: September 16-30, 2024
Bite-sized news and updates on the latest in Taiwan cybersecurity
Stealthy Fileless Attack Targets US-Taiwan Defense Industry Conference Attendees
September 16, 2024
A recent campaign uncovered by Cyble Research and Intelligence Labs (CRIL) has revealed a sophisticated fileless malware attack targeting individuals connected to the upcoming US-Taiwan Defense Industry Conference. This attack, using a malicious LNK file disguised as a PDF registration form, executes in-memory without leaving traces on the victim's disk. By leveraging advanced techniques to establish persistence and evade detection, the attackers aim to exfiltrate sensitive information related to the defense event. Given the geopolitical sensitivity and the focus on Taiwan's defense collaborations, this attack underscores ongoing cyber espionage threats Taiwan faces, particularly from state-sponsored actors.
Chunghwa Telecom Targeted in Major Data Breach
September 17, 2024
Threat actors have claimed responsibility for leaking 400GB of sensitive data belonging to Chunghwa Telecom, Taiwan's largest telecommunications company. The stolen data reportedly includes confidential documents and other critical information, posing a significant threat to the company’s security and operations. Chunghwa Telecom, which generates an annual revenue of $6.1 billion, faces serious cybersecurity challenges following this alleged breach, highlighting growing concerns about data protection and resilience in Taiwan’s key industries.
Read more about the previous Data Breach at Chunghwa Telecom.
Taiwan-Japan Innovation Summit Strengthens Startup Collaboration
September 18, 2024
The third Japan-Taiwan Innovation Summit, co-organized by Taiwan’s Startup Island and the Tokyo Metropolitan Government, took place on September 17-18, 2024, at Tokyo Innovation Base. As Taiwan's largest overseas entrepreneurship event, the summit drew over 100 Taiwanese startups and more than 1,000 participants, including investors and tech experts from both countries. This year's event focused on expanding business and technological cooperation in sectors such as AI, cybersecurity, and semiconductors, while promoting talent exchange. With significant media coverage and broader business opportunities, the summit continues to boost Taiwan-Japan collaboration in innovation.
Vice President Hsiao Promotes Women’s Role in Cybersecurity
September 24, 2024
Vice President Hsiao Bi-khim, alongside key officials, met with the winning teams of the 4th Girls in CyberSecurity (GiCS) contest on the 24th, applauding their achievements in a competition designed to inspire young women to join the cybersecurity sector. During the event, Hsiao emphasized the need to expand female representation in the field, which remains limited, and encouraged continued participation in information security. Launched in 2021, GiCS aims to foster interest in cybersecurity among high school and university women, and Vice President Hsiao expressed hope that more women would contribute to tackling cybersecurity challenges in Taiwan.
[REPORT] Taiwan as a Strategic Target for Emerging Cybercriminals
September 26, 2024
According to a recent report by Cyfirma, The Changing Cyber Threat Landscape Asia-Pacific (APAC) Region – Volume 3, Taiwan has become a prime target for emerging cybercriminals due to its minimal language barrier and tense geopolitical situation. Cybercriminals exploit Taiwan as a testing ground, evading mainland Chinese law enforcement while accessing valuable semiconductor research and expertise. The ongoing tensions between Taiwan and China have also created numerous opportunities for intelligence gathering and disinformation campaigns, leading to the rise of "technology companies" operating in Taiwan that specialize in cybercrime. This makes Taiwan a critical hub for both cybercriminal activity and intelligence operations aimed at serving Chinese interests.
[REPORT] Taiwan Rejects PRC's Cyber Espionage Allegations Amid Ongoing Tensions
September 27, 2024
In a recent WeChat post, China's Ministry of State Security (MSS) accused Taiwan’s Information, Communications, and Electronic Force Command (ICEFCOM) of conducting cyber operations, cognitive warfare, and public opinion manipulation against the PRC. The MSS further claimed that ICEFCOM, under Taiwan's Ministry of National Defense, targeted key sectors like aerospace and defense to steal data and intelligence. In response, ICEFCOM refuted the allegations, emphasizing its role in safeguarding national defense networks. These accusations come shortly after revelations of China's own hacking operations, particularly by the state-sponsored group Flax Typhoon, which has been actively infiltrating Taiwanese networks for espionage purposes. Taiwan's rejection of these claims highlights the escalating cyber tensions between the two nations.
Read the full report by the Institute for the Study of War.
CyberSec Taiwan
About CyberSec Taiwan
Your source for the latest news and analysis on Taiwan-centric cybersecurity.