Latest news with #MarkKelly
Canada News.Net
5 days ago
- Business
- Canada News.Net
Researchers: Hackers with China ties hit Taiwan chip supply
SUNNYVALE, California: Cyber espionage groups aligned with China have ramped up targeted attacks on Taiwan's semiconductor sector and industry analysts, according to new research released by cybersecurity firm Proofpoint. The analysis outlines an uptick in hacking campaigns between March and June, with activity from at least three China-linked groups, some of which remains ongoing. The intrusions are part of a broader effort to gather intelligence on Taiwan's chip industry as tensions rise over U.S. export controls and China's efforts to develop domestic semiconductor alternatives. "We've seen entities that we hadn't ever seen being targeted in the past being targeted," said Mark Kelly, a threat researcher at Proofpoint, based out of Sunnyvale, California. The campaigns have focused on 15 to 20 organizations, including small companies, global enterprises, and investment analysts, some working at a central U.S.-headquartered bank. The researchers declined to name the specific targets or confirm whether any attempts were successful. Hackers used varied techniques. In one case, attackers used compromised Taiwanese university email accounts to pose as job seekers, sending malicious PDFs or password-protected files to employees at semiconductor design and manufacturing firms. Another group posed as a fake investment firm targeting analysts focused on Taiwan's chip market. Proofpoint did not specify the companies affected, but Taiwan is home to major chipmakers including TSMC, MediaTek, UMC, Nanya, and RealTek. Most firms declined to comment or did not respond. A spokesperson for the Chinese embassy in Washington said China opposes all forms of cybercrime and is also a victim of such threats. Taiwanese cybersecurity firm TeamT5 confirmed an increase in email-based attacks but noted they weren't yet widespread. It emphasized that semiconductors have long been a "constant interest" for advanced China-linked hacking groups. TeamT5 also cited a June case where a group called Amoeba targeted a chemical company tied to the semiconductor supply chain, highlighting hackers' interest in peripheral industries as well.
The Hindu
17-07-2025
- Business
- The Hindu
China-linked hackers target Taiwan's chip industry with increasing attacks, researchers say
Chinese-linked hackers are targeting the Taiwanese semiconductor industry and investment analysts as part of a string of cyber espionage campaigns, researchers said on Wednesday. While hacking to steal data and information about the industry is not new, there is an increase in sustained hacking campaigns from several China-aligned hacking groups, researchers with cybersecurity firm Proofpoint said in a new analysis. 'We've seen entities that we hadn't ever seen being targeted in the past being targeted,' said Mark Kelly, a threat researcher focused on Chinese-related threats at Proofpoint. The previously unreported hacking campaigns were carried out by at least three distinct Chinese-linked groups primarily between March and June of this year, with some activity likely ongoing, Proofpoint said. They come amid rising restrictions by Washington on exports to China of U.S.-designed chips that are often manufactured in Taiwan. China's chip industry has been working to replace its dwindling supply of sophisticated U.S. chips, especially those used in artificial intelligence. The researchers declined to identify the hacking targets, but told Reuters that approximately 15 to 20 organisations ranging from small businesses, analysts employed by at least one U.S.-headquartered international bank, and large global enterprises faced attacks. Major Taiwanese semiconductor firms include Taiwan Semiconductor Manufacturing Co, MediaTek, United Microelectronics Corp, Nanya Technology and RealTek Semiconductor. TSMC declined to comment. MediaTek, UMC, Nanya and RealTek did not respond to requests for comment. Reuters was unable to identify the specific hacking targets or determine whether any of the efforts were successful. A spokesperson for the Chinese embassy in Washington told Reuters in an email that cyber attacks 'are a common threat faced by all countries, China included,' and that the Asian country 'firmly opposes and combats all forms of cyber attacks and cyber crime — a position that is consistent and clear.' The activity ranged from one or two emails sent as part of the more targeted campaign focused on specific people, to as many as 80 emails when trying to gain information from the company at large, Kelly said. One group targeted semiconductor design, manufacturing and supply-chain organisations using compromised Taiwanese university email accounts to pose as job seekers and send malware via PDFs with URLs leading to malicious files, or a password-protected archive. Another targeted financial analysts at major unnamed investment firms focused on the Taiwanese semiconductor industry by posing as a fictitious investment firm and seeking collaboration. Two of the entities are based in Asia, while the third is based in the U.S. The FBI declined to comment. A representative of TeamT5, a cybersecurity firm based in Taiwan, told Reuters that it had also seen an increase in emails being sent targeting the semiconductor industry tied to a few hacking groups, 'but not a wide or general phenomenon.' Targeting of semiconductors and the supply chain around them 'is a persistent threat that has existed for long,' the representative said, and a 'constant interest' for Chinese-related advanced hacking operators. These groups often target 'peripheral suppliers or related industries,' the representative said, such as a situation in June where a China-linked hacking group identified by TeamT5 as "Amoeba" launched a phishing campaign against an unnamed chemical company that plays a critical role in the semiconductor supply chain.
Straits Times
17-07-2025
- Business
- Straits Times
China-linked hackers target Taiwan's chip industry with increasing attacks, researchers say
The previously unreported hacking campaigns were carried out by at least three distinct Chinese-linked groups primarily between March and June of 2025. TAIPEI - Chinese-linked hackers are targeting the Taiwanese semiconductor industry and investment analysts as part of a string of cyber espionage campaigns, researchers said on July 16. While hacking to steal data and information about the industry is not new, there is an increase in sustained hacking campaigns from several China-aligned hacking groups, researchers with cybersecurity firm Proofpoint said in a new analysis. 'We've seen entities that we hadn't ever seen being targeted in the past being targeted,' said Mr Mark Kelly, a threat researcher focused on Chinese-related threats at Proofpoint. The previously unreported hacking campaigns were carried out by at least three distinct Chinese-linked groups primarily between March and June of 2025, with some activity likely ongoing, Proofpoint said. They come amid rising restrictions by Washington on exports to China of US-designed chips that are often manufactured in Taiwan. China's chip industry has been working to replace its dwindling supply of sophisticated US chips, especially those used in artificial intelligence. The researchers declined to identify the hacking targets, but told Reuters that approximately 15 to 20 organisations ranging from small businesses, analysts employed by at least one US-headquartered international bank, and large global enterprises faced attacks. Major Taiwanese semiconductor firms include Taiwan Semiconductor Manufacturing Co, MediaTek, United Microelectronics Corp, Nanya Technology and RealTek Semiconductor. TSMC declined to comment. MediaTek, UMC, Nanya and RealTek did not respond to requests for comment. Reuters was unable to identify the specific hacking targets or determine whether any of the efforts were successful. A spokesperson for the Chinese embassy in Washington told Reuters in an email that cyber attacks 'are a common threat faced by all countries, China included', and that the Asian country 'firmly opposes and combats all forms of cyber attacks and cyber crime – a position that is consistent and clear'. The activity ranged from one or two emails sent as part of the more targeted campaign focused on specific people, to as many as 80 emails when trying to gain information from the company at large, Mr Kelly said. One group targeted semiconductor design, manufacturing and supply-chain organisations using compromised Taiwanese university email accounts to pose as job seekers and send malware via PDFs with URLs leading to malicious files, or a password-protected archive. Another targeted financial analysts at major unnamed investment firms focused on the Taiwanese semiconductor industry by posing as a fictitious investment firm and seeking collaboration. Two of the entities are based in Asia, while the third is based in the US. The FBI declined to comment. A representative of TeamT5, a cybersecurity firm based in Taiwan, told Reuters that it had also seen an increase in emails being sent targeting the semiconductor industry tied to a few hacking groups, 'but not a wide or general phenomenon'. Targeting of semiconductors and the supply chain around them 'is a persistent threat that has existed for long,' the representative said, and a 'constant interest' for Chinese-related advanced hacking operators. These groups often target 'peripheral suppliers or related industries', the representative said, such as a situation in June where a China-linked hacking group identified by TeamT5 as 'Amoeba' launched a phishing campaign against an unnamed chemical company that plays a critical role in the semiconductor supply chain. REUTERS
Japan Times
17-07-2025
- Business
- Japan Times
China-linked hackers seen targeting Taiwan's chip industry with increasing attacks
Chinese-linked hackers are targeting the Taiwanese semiconductor industry and investment analysts as part of a string of cyber espionage campaigns, researchers said on Wednesday. While hacking to steal data and information about the industry is not new, there is an increase in sustained hacking campaigns from several China-aligned hacking groups, researchers with cybersecurity firm Proofpoint said in a new analysis. "We've seen entities that we hadn't ever seen being targeted in the past being targeted,' said Mark Kelly, a threat researcher focused on Chinese-related threats at Proofpoint. The previously unreported hacking campaigns were carried out by at least three distinct Chinese-linked groups primarily between March and June of this year, with some activity likely ongoing, Proofpoint said. They come amid rising restrictions by Washington on exports to China of U.S.-designed chips that are often manufactured in Taiwan. China's chip industry has been working to replace its dwindling supply of sophisticated U.S. chips, especially those used in artificial intelligence. The researchers declined to identify the hacking targets but said that approximately 15 to 20 organizations ranging from small businesses, analysts employed by at least one U.S.-headquartered international bank, and large global enterprises faced attacks. Major Taiwanese semiconductor firms include Taiwan Semiconductor Manufacturing Co., MediaTek, United Microelectronics Corp., Nanya Technology and RealTek Semiconductor. TSMC declined to comment. MediaTek, UMC, Nanya and RealTek did not respond to requests for comment. Reuters was unable to identify the specific hacking targets or determine whether any of the efforts were successful. A spokesperson for the Chinese embassy in Washington said in an email that cyberattacks "are a common threat faced by all countries, China included,' and that the Asian country "firmly opposes and combats all forms of cyber attacks and cyber crime — a position that is consistent and clear.' The activity ranged from one or two emails sent as part of the more targeted campaign focused on specific people, to as many as 80 emails when trying to gain information from the company at large, Kelly said. One group targeted semiconductor design, manufacturing and supply-chain organizations using compromised Taiwanese university email accounts to pose as job seekers and send malware via PDFs with URLs leading to malicious files, or a password-protected archive. Another targeted financial analysts at major unnamed investment firms focused on the Taiwanese semiconductor industry by posing as a fictitious investment firm and seeking collaboration. Two of the entities are based in Asia, while the third is based in the U.S. The FBI declined to comment. A representative of TeamT5, a cybersecurity firm based in Taiwan, said it had also seen an increase in emails being sent targeting the semiconductor industry tied to a few hacking groups, "but not a wide or general phenomenon.' The targeting of semiconductors and the supply chain around them "is a persistent threat that has existed for long,' the representative said, and a "constant interest' for Chinese-related advanced hacking operators. These groups often target "peripheral suppliers or related industries,' the representative said, such as a situation in June where a China-linked hacking group identified by TeamT5 as "Amoeba" launched a phishing campaign against an unnamed chemical company that plays a critical role in the semiconductor supply chain.
Yahoo
16-07-2025
- Business
- Yahoo
Exclusive-China-linked hackers target Taiwan's chip industry with increasing attacks, researchers say
By AJ Vicens (Reuters) -Chinese-linked hackers are targeting the Taiwanese semiconductor industry and investment analysts as part of a string of cyber espionage campaigns, researchers said on Wednesday. While hacking to steal data and information about the industry is not new, there is an increase in sustained hacking campaigns from several China-aligned hacking groups, researchers with cybersecurity firm Proofpoint said in a new analysis. 'We've seen entities that we hadn't ever seen being targeted in the past being targeted,' said Mark Kelly, a threat researcher focused on Chinese-related threats at Proofpoint. The previously unreported hacking campaigns were carried out by at least three distinct Chinese-linked groups primarily between March and June of this year, with some activity likely ongoing, Proofpoint said. They come amid rising restrictions by Washington on exports to China of U.S.-designed chips that are often manufactured in Taiwan. China's chip industry has been working to replace its dwindling supply of sophisticated U.S. chips, especially those used in artificial intelligence. The researchers declined to identify the hacking targets, but told Reuters that approximately 15 to 20 organizations ranging from small businesses, analysts employed by at least one U.S.-headquartered international bank, and large global enterprises faced attacks. Major Taiwanese semiconductor firms include Taiwan Semiconductor Manufacturing Co, MediaTek, United Microelectronics Corp, Nanya Technology and RealTek Semiconductor. TSMC declined to comment. MediaTek, UMC, Nanya and RealTek did not respond to requests for comment. Reuters was unable to identify the specific hacking targets or determine whether any of the efforts were successful. A spokesperson for the Chinese embassy in Washington told Reuters in an email that cyber attacks 'are a common threat faced by all countries, China included,' and that the Asian country 'firmly opposes and combats all forms of cyber attacks and cyber crime — a position that is consistent and clear.' The activity ranged from one or two emails sent as part of the more targeted campaign focused on specific people, to as many as 80 emails when trying to gain information from the company at large, Kelly said. One group targeted semiconductor design, manufacturing and supply-chain organizations using compromised Taiwanese university email accounts to pose as job seekers and send malware via PDFs with URLs leading to malicious files, or a password-protected archive. Another targeted financial analysts at major unnamed investment firms focused on the Taiwanese semiconductor industry by posing as a fictitious investment firm and seeking collaboration. Two of the entities are based in Asia, while the third is based in the U.S. The FBI declined to comment. A representative of TeamT5, a cybersecurity firm based in Taiwan, told Reuters that it had also seen an increase in emails being sent targeting the semiconductor industry tied to a few hacking groups, 'but not a wide or general phenomenon.' Targeting of semiconductors and the supply chain around them 'is a persistent threat that has existed for long,' the representative said, and a 'constant interest' for Chinese-related advanced hacking operators. These groups often target 'peripheral suppliers or related industries,' the representative said, such as a situation in June where a China-linked hacking group identified by TeamT5 as "Amoeba" launched a phishing campaign against an unnamed chemical company that plays a critical role in the semiconductor supply chain.
