Taiwan’s National Security Bureau (NSB) reported a significant surge in cyberattacks targeting government departments in 2024, with daily averages soaring to 2.4 million attacks—double the 1.2 million daily attacks recorded in 2023. The bureau attributes the bulk of these attacks to Chinese cyber forces, underscoring an escalating cyber warfare landscape amid heightened political and military tensions.
Taiwan has long grappled with cyberattacks, but the latest statistics reveal an unprecedented scale of digital assaults. The NSB’s report, released on January 5, provides a granular look at the cyber onslaught faced by Taiwan’s Government Service Network (GSN). This network, which supports various government operations, has become a focal point for cyber aggressors.
The report indicates that the telecommunications, transportation, and defense sectors were primary targets. “Although many of those attacks have been effectively detected and blocked, the growing numbers of attacks pinpoint the increasingly severe nature of China’s hacking activities,” the report stated.
China’s cyber tactics included a range of sophisticated methods, from distributed denial-of-service (DDoS) attacks to advanced persistent threats (APTs) and backdoor software deployments. DDoS attacks were particularly timed to coincide with Chinese military drills around Taiwan, exacerbating the impact by disrupting access to critical services, including transportation and financial institutions.
The strategic timing of these attacks aims to augment Beijing’s military maneuvers, such as the two major exercises held in May and October 2024, labeled Joint Sword – 2024A and B. These drills, paired with cyber offensives, are seen as part of a broader campaign to intimidate and pressure Taiwan into accepting China’s sovereignty claims.
Taiwanese officials have frequently accused China of employing “grey-zone harassment,” a strategy that blurs the lines between peace and conflict. This includes a combination of military posturing, psychological operations, and cyberattacks designed to exhaust and destabilize Taiwan without crossing into outright warfare.
The NSB’s report sheds light on how cyberattacks are seamlessly integrated into this grey-zone strategy. For instance, social engineering attacks have targeted Taiwanese civil servants’ emails, aiming to extract sensitive information and sow discord within the government.
The report highlights the strategic focus on Taiwan’s critical infrastructure, including highways and ports. These sectors are vital to Taiwan’s national security and economic stability. By targeting these areas, Chinese cyber forces aim to undermine Taiwan’s operational capabilities and gain a strategic advantage in any potential conflict scenario.
The NSB detailed attempts to compromise infrastructure through persistent and advanced hacking techniques. These efforts not only threaten to disrupt government operations but also aim to collect intelligence that could be leveraged for political, military, and economic gains.
China’s cyber activities are not confined to Taiwan. Globally, Beijing has been accused of orchestrating cyberattacks against various countries, including the United States. The recent accusation by the U.S. that Chinese hackers stole documents from the Treasury Department adds to the growing body of evidence implicating China in widespread cyber espionage.
While China routinely denies involvement in hacking activities, the pattern of attacks and the sophisticated nature of the operations suggest a coordinated effort. Taiwan’s NSB report adds weight to these allegations, offering a detailed account of the cyber threats emanating from China.
In response to the rising cyber threats, Taiwan has been ramping up its cybersecurity measures. The government is investing in advanced detection and prevention systems, fostering international cooperation on cybersecurity, and enhancing public awareness about cyber threats.
The NSB emphasized the importance of a multi-faceted approach to countering these cyber threats. This includes not only technological solutions but also strategic policies and international alliances. Strengthening cybersecurity is now a national priority for Taiwan, as the island seeks to safeguard its digital sovereignty and protect its citizens from cyber aggression.
