Chinese state-backed threat actors target Taiwan’s semiconductor sector with Colbalt Strike and custom backdoors.
Posted inCybersecurity News

Chinese state-backed threat actors target Taiwan’s semiconductor sector with Colbalt Strike and custom backdoors.

Recent months have seen a significant escalation in cyber espionage campaigns targeting Taiwan’s vital semiconductor industry, attributed to Chinese state-backed threat actors. These sophisticated operations, reported from March through June 2025 and potentially ongoing, are believed to be aimed at acquiring proprietary technology, disrupting business operations, and gathering sector intelligence. The uptick in attacks aligns with China’s strategic drive for semiconductor self-sufficiency amid increasingly restrictive export controls imposed by the United States and its allies.
Taiwan’s National Security Bureau Issues Public Warning on Data Risks from Chinese Social Media Apps.
Posted inCybersecurity News

Taiwan’s National Security Bureau Issues Public Warning on Data Risks from Chinese Social Media Apps.

Taiwan’s National Security Bureau (NSB) has issued a formal public alert regarding significant data security risks posed by several Chinese social media applications, including TikTok (Douyin), Weibo, and RedNote (Xiaohongshu). The advisory follows a comprehensive review of these platforms’ data handling practices and their close ties to China, raising concerns about privacy and national security.
Hacker in front of China Chinese flag
Posted inCybersecurity News

New threat actor, HoldingHands, targeting organizations in Taiwan.

The “HoldingHands” threat actor is part of a broader, ongoing campaign targeting organizations in Taiwan since at least January 2025. The group employs a variety of malware tools, including the HoldingHands Remote Access Trojan (RAT), also known as Gh0stBins, as well as other malware strains such as Winos 4.0 and Gh0stCringe. These tools are often delivered through phishing emails that impersonate official communications from Taiwan’s National Taxation Bureau or other trusted entities, using lures related to taxes, invoices, and pensions to trick recipients into opening malicious attachments.
Hacker in front of China Chinese flag
Posted inCybersecurity News

Silver Fox is ramping up attacks against Taiwan using malware variants linked to the Gh0st RAT family.

Silver Fox APT (also known as Void Arachne) has intensified cyberattacks against Taiwan using sophisticated malware variants linked to the Gh0st RAT family, including Winos 4.0 and ValleyRAT. While “Gh0stCringe” and “HoldingHands RAT” are not explicitly named in recent reports, the group’s tactics align with evolving Gh0st RAT derivatives.