Taiwan — Cyber Threat Profile
Taiwan is one of the most cyber-contested territories globally. China's cyber army launched an average of 2.63 million intrusion attempts per day against Taiwan's critical infrastructure in 2025, a 6% increase over 2024 and a 113% increase from 2023. The energy sector saw a tenfold surge in Chinese intrusion attempts in 2025, while hospitals and emergency services faced a 54% rise. The top five active Chinese groups are BlackTech, Flax Typhoon, Mustang Panda, APT41, and UNC3886. Attack methods include hardware vulnerability exploitation, DDoS via botnets, social engineering, and supply chain compromises.- National CERT/CSIRT: TWCERT/CC
Latest Taiwan coverage
- Fake event invites target Taiwan researchers' Google logins 2026-10-11 · Nation-State
- Fake Cloudflare page hidden in an npm package redirects victims to a phishing site 2026-07-05 · Cyber Incidents
Threat actors targeting Taiwan
- Antlion APT
- APT27 APT
- APT41 APT
- BlackTech APT
- Chimera APT
- Earth Lusca APT
- Flax Typhoon APT
- Mustang Panda APT
- Salt Typhoon APT
- TIDRONE APT
- Tropic Trooper APT
- Winnti Group APT
- The Gentlemen Ransomware · 23 incident(s)
- Qilin Ransomware · 19 incident(s)
- INC Ransom Ransomware · 10 incident(s)
- NightSpire Ransomware · 10 incident(s)
- Orova Ransomware · 10 incident(s)
- LockBit Ransomware · 9 incident(s)
- RansomHub Ransomware · 9 incident(s)
- DragonForce Ransomware · 7 incident(s)
- Akira Ransomware · 5 incident(s)
- Hunters International Ransomware · 4 incident(s)
- Krybit Ransomware · 4 incident(s)
- Lynx Ransomware Ransomware · 4 incident(s)
- World Leaks Ransomware · 3 incident(s)
- BlackSuit Ransomware · 2 incident(s)
- Cl0p Ransomware · 2 incident(s)
- Coinbase Cartel Ransomware · 2 incident(s)
- Deadlock Ransomware · 2 incident(s)
- Sarcoma Ransomware · 2 incident(s)
- Settra Ransomware · 2 incident(s)
- 8Base Ransomware · 1 incident(s)
- AiLock Ransomware · 1 incident(s)
- Blackfield Ransomware · 1 incident(s)
- Cactus Ransomware · 1 incident(s)
- Chaos Ransomware · 1 incident(s)
- Eclipse Ransomware · 1 incident(s)
- Embargo Ransomware · 1 incident(s)
- Everest Ransomware · 1 incident(s)
- Exitium Ransomware · 1 incident(s)
Most targeted sectors
- Technology 59 incident(s)
- Manufacturing 39 incident(s)
- Healthcare 13 incident(s)
- Retail & Consumer 7 incident(s)
- Business & Professional Services 6 incident(s)
- Education & Research 3 incident(s)
- Agriculture & Food 2 incident(s)
- Construction 2 incident(s)
- Energy & Utilities 2 incident(s)
- Hospitality & Tourism 2 incident(s)
- Telecommunications 2 incident(s)
- Transportation & Logistics 2 incident(s)
Recent claimed incidents
- Trevi Technology 2026-10-23 · Technology
- Taiwan Otsuka Pharmaceutical 2026-10-16 · Healthcare
- Taiwan Otsuka Pharmaceutical 2026-10-14 · Healthcare
- T.S. Lines (intra-Asia container shipping) 2026-10-12 · Transportation
- Gatetech Technology 2026-10-12 · Technology
- TEXMA International Co., Ltd 2026-10-10 · Manufacturing
- Ability Enterprise 2026-10-09
- Jentech Precision Industrial 2026-10-09 · Manufacturing
- Nantou Shiuhkuang Senior High School. 2026-10-08 · Education
- Drinks Wines Spirits 2026-09-30 · Retail & E-Commerce
- advantech.com 2026-09-29 · Manufacturing
- HEC Group 2026-09-24 · Other
- Silicon Integrated Systems 2026-09-17 · Technology
- Managing a company 2026-09-14 · Technology
- PharmaEssentia Corporation 2026-09-09 · Healthcare