Trends
China-backed hackers intensify cyberattacks on Taiwan chipmakers
China-backed hackers launched spear-phishing campaigns against Taiwan chipmakers and analysts from March to June 2025.
Headline
China-backed hackers launched spear-phishing campaigns against Taiwan chipmakers and analysts from March to June 2025.
Context
• At least three China-aligned groups launched spear-phishing campaigns • Targeted semiconductor firms and financial analysts from March to June Between March and June 2025, three distinct China-linked threat groups stepped up cyberattacks on Taiwan’s semiconductor ecosystem. The campaigns aimed at chip manufacturers, packaging firms, suppliers, and financial analysts involved in the semiconductor sector. Attackers sent tailored spear-phishing emails often pretending to be job applicants, investment firms, or university contacts. Malicious attachments used malware such as Cobalt Strike and custom backdoors. Some campaigns deployed between one and 80 emails per company to infiltrate networks.
Evidence
Pending intelligence enrichment.
Analysis
Surveillance targeted around 15 to 20 organisations, including small specialist firms, major multinational enterprises, and top semiconductor companies. While researchers could not confirm successful breaches, they flagged the wave of attacks as persistent and evolving. Taiwan-based security teams noted a broader pattern of cyber espionage aimed at peripheral suppliers and critical supply-chain players. The attacks coincided with growing export controls on US-origin chips used in AI, and escalating geopolitical tensions around semiconductor technology. Also read: AMD EPYC chips power Nokia telecom cloud Also read: US warns against Huawei AI chips The semiconductor industry underpins global technology sectors including AI, telecoms, and defence. Spear-phishing campaigns against chipmakers pose threats to intellectual property and supply-chain integrity. Disruptions or data loss can stall production and erode technological leadership. Financial analysts also faced targeted attacks, reflecting broader efforts to track semiconductor trends. Taiwan produces a large share of the world’s advanced chips, so its security directly affects global supply stability. These attacks highlight how cyber warfare now intersects with industrial and geopolitical competition. Organisations must strengthen email defences, deploy advanced threat detection, and improve staff training. Governments and businesses also need better coordination to defend key infrastructure. This wave of espionage signals a shift in cyber tactics amid rising tech tensions between major powers.
Key Points
- What happened: Proofpoint reports surge in cyber-espionage campaigns
- Why it’s important
Actions
Pending intelligence enrichment.
