China and Taiwan Accuse Each Other for Cyberattacks Against Critical Infrastructure

Cross-strait tensions have escalated into a new domain as China and Taiwan engage in unprecedented mutual accusations of cyberwarfare targeting critical infrastructure systems. The diplomatic dispute has intensified following Taiwan President Lai Ching-te’s first year in office, during which both governments have publicly traded allegations of sophisticated cyber operations against each other’s governmental, military, and […] The post China and Taiwan Accuse Each Other for Cyberattacks Against Critical Infrastructure appeared first on Cyber Security News.

Jun 13, 2025 - 17:40

China and Taiwan Accuse Each Other for Cyberattacks Against Critical Infrastructure

Cross-strait tensions have escalated into a new domain as China and Taiwan engage in unprecedented mutual accusations of cyberwarfare targeting critical infrastructure systems.

The diplomatic dispute has intensified following Taiwan President Lai Ching-te’s first year in office, during which both governments have publicly traded allegations of sophisticated cyber operations against each other’s governmental, military, and private sector networks.

Beijing recently escalated its accusations, claiming that Taiwan’s ruling Democratic Progressive Party sponsored an unnamed foreign hacking organization to target a Chinese technology company, with Chinese police alleging that up to 1,000 military, energy, and government networks were compromised by Taiwanese-linked operations.

The Chinese government has also accused Taiwanese intelligence officers of targeting Beijing’s infrastructure systems in coordinated attacks that occurred in March 2025.

The Diplomat analysts identified a significant escalation in the cyber conflict, noting that Taiwan has faced an alarming surge in Chinese cyber operations throughout 2024.

The island’s government estimates reveal that daily cyberattacks from China doubled to an average of 2.4 million incidents, with particular emphasis on infiltrating government and telecommunication infrastructure.

These attacks represent a strategic shift from traditional intelligence gathering to more aggressive infrastructure targeting capabilities.

Taiwan has categorically denied all Chinese cyberwarfare accusations, instead accusing the mainland government of orchestrating a systematic disinformation campaign designed to destabilize the island’s international standing.

Conversely, cybersecurity researchers have documented extensive evidence of Chinese threat actors conducting sustained operations against Taiwanese infrastructure, including the identification of Earth Ammit, a sophisticated cyberthreat group that successfully infiltrated Taiwan’s drone and satellite supply chains throughout 2024.

The scope of Earth Ammit’s operations extends far beyond aerospace sectors, with subsequent investigations revealing successful penetration of Taiwan’s heavy industry, software development, media organizations, and healthcare infrastructure.

This multi-sector approach demonstrates the comprehensive nature of China’s cyber strategy, which serves dual purposes of psychological warfare and tactical intelligence gathering for potential military scenarios.

Strategic Infrastructure Targeting and Malware Deployment

The cyber operations between China and Taiwan have evolved beyond traditional espionage into strategic infrastructure disruption capabilities.

Chinese cyber units have demonstrated sophisticated malware deployment techniques specifically designed to compromise critical systems that would be essential during military conflict scenarios.

These operations mirror tactics previously employed against United States infrastructure, where malicious code was strategically positioned to disrupt utilities and military logistics networks.

Senior U.S. cybersecurity officials, including former National Security Agency cybersecurity director Rob Joyce, identified a fundamental shift in Chinese cyber operations during 2023, noting the transition from information gathering to infrastructure disruption capabilities.

The malware discovered in these operations was specifically engineered to target utility systems in strategic locations, including Guam, with the apparent objective of delaying potential U.S. military deployments or resupply operations during Taiwan Strait conflicts.

Similar infrastructure targeting methodologies have been documented against Taiwan’s critical systems, with cybersecurity researchers identifying comparable Chinese efforts designed to establish persistent access and disruption capabilities within the island’s essential services infrastructure.

These operations represent a strategic preparation phase, positioning China to potentially sabotage Taiwanese critical infrastructure during any future military engagement while simultaneously gathering intelligence on defensive capabilities and response protocols.

Automate threat response with ANY.RUN’s TI Feeds—Enrich alerts and block malicious IPs across all endpoints -> Request full acces

The post China and Taiwan Accuse Each Other for Cyberattacks Against Critical Infrastructure appeared first on Cyber Security News.