• At least three China-aligned groups launched spear-phishing campaigns
• Targeted semiconductor firms and financial analysts from March to June
What happened: Proofpoint reports surge in cyber-espionage campaigns
Between March and June 2025, three distinct China-linked threat groups stepped up cyberattacks on Taiwan’s semiconductor ecosystem. The campaigns aimed at chip manufacturers, packaging firms, suppliers, and financial analysts involved in the semiconductor sector. Attackers sent tailored spear-phishing emails often pretending to be job applicants, investment firms, or university contacts. Malicious attachments used malware such as Cobalt Strike and custom backdoors. Some campaigns deployed between one and 80 emails per company to infiltrate networks.
Surveillance targeted around 15 to 20 organisations, including small specialist firms, major multinational enterprises, and top semiconductor companies. While researchers could not confirm successful breaches, they flagged the wave of attacks as persistent and evolving. Taiwan-based security teams noted a broader pattern of cyber espionage aimed at peripheral suppliers and critical supply-chain players. The attacks coincided with growing export controls on US-origin chips used in AI, and escalating geopolitical tensions around semiconductor technology.
Also read: AMD EPYC chips power Nokia telecom cloud
Also read: US warns against Huawei AI chips
Why it’s important
The semiconductor industry underpins global technology sectors including AI, telecoms, and defence. Spear-phishing campaigns against chipmakers pose threats to intellectual property and supply-chain integrity. Disruptions or data loss can stall production and erode technological leadership. Financial analysts also faced targeted attacks, reflecting broader efforts to track semiconductor trends.
Taiwan produces a large share of the world’s advanced chips, so its security directly affects global supply stability. These attacks highlight how cyber warfare now intersects with industrial and geopolitical competition. Organisations must strengthen email defences, deploy advanced threat detection, and improve staff training. Governments and businesses also need better coordination to defend key infrastructure. This wave of espionage signals a shift in cyber tactics amid rising tech tensions between major powers.
