Published on: January 7, 2025
Taiwan experienced a significant increase in cyberattacks on government networks in 2024, with daily attempts averaging 2.4 million — double the 1.2 million daily attacks reported in 2023. The National Security Bureau (NSB) attributes the majority of these attacks to Chinese state-backed hackers, indicating escalating cyber tensions amid geopolitical disputes.
The NSB’s report explains the “increasingly severe nature of China’s hacking activities”, noting that while many attacks were detected and blocked, the sheer volume indicates a persistent and intensifying threat. Critical Taiwanese industries faced substantial increases in targeted cyberattacks: telecommunications saw a 650 percent rise, transportation 70 percent, and the defense supply chain 57 percent.
Chinese hackers employed sophisticated techniques, including exploiting vulnerabilities in network devices, utilizing evasion methods like living off the land and deploying social engineering tactics aimed at civil servants’ emails to extract confidential information.
Phishing, Trojans, and backdoors were also used to infiltrate Taiwan’s defense supply chain and internet service providers, aiming to compromise critical infrastructure such as highways and ports, thereby disrupting transportation and logistics systems.
The NSB noted that some cyberattacks coincided with Beijing’s military drills around Taiwan, suggesting a strategy to amplify harassment and intimidation. China has consistently denied involvement in hacking activities; however, several governments, including the United States, have accused Beijing of cyber espionage and attacks.
In response to the escalating cyber threats, Taiwan has implemented a joint security defense mechanism to facilitate real-time sharing of threat information among intelligence sources and government agencies. This collaborative approach seeks to improve the island’s resilience against cyber intrusions and safeguard its critical infrastructure and private enterprises.