China’s Ministry of State Security (MSS) has recently accused four Taiwanese individuals of being hackers affiliated with Taiwan’s military cyber force. According to the MSS, these individuals are members of Taiwan’s Information, Communications, and Electronic Force Command (ICEFCOM), and they have allegedly conducted cyberattacks against critical Chinese infrastructure.
The accusations from China have further escalated tensions between the two nations, which have been locked in a long-standing rivalry. The MSS has made public the names, photographs, birthdates, and job titles of the accused individuals, claiming that ICEFCOM has been collaborating with external hackers and cybersecurity firms to carry out cyber espionage and infiltration operations.
The MSS stated that since its establishment, ICEFCOM has been actively engaged in targeted cyberattacks and infiltration operations against various critical Chinese infrastructure, including systems controlling waterworks, power grids, telecommunications networks, and surveillance cameras. The primary aim of these attacks, according to China, is to disrupt national stability.
Furthermore, China accused ICEFCOM of attempting to breach databases containing sensitive information on Chinese citizens, government officials, and military operations. Beijing labeled these activities as part of Taiwan’s broader intelligence-gathering efforts, allegedly supported by foreign entities.
In response to China’s allegations, Taiwan’s Ministry of National Defense promptly rejected the claims, denouncing them as an attempt to shift blame. Taiwan reiterated that its cybersecurity units focus primarily on defensive measures rather than offensive operations. The defense ministry in Taipei accused Beijing of fabricating claims to justify its own cyber activities against Taiwan.
Taiwan recently released a report detailing Beijing’s cyber tactics in 2024, revealing that cyberattacks against Taiwanese government departments averaged 2.4 million per day. The report suggested that China’s state-sponsored hackers have been enhancing their cyber warfare techniques to exert political and economic pressure on Taiwan.
The report outlined key methods used by China in its cyber operations, ranging from phishing campaigns to large-scale data breaches designed to compromise government and military networks. China’s hackers utilized Advanced Persistent Threat (APT) groups linked to the Chinese government, who infiltrated Taiwanese organizations using malware-laced emails and trojanized software updates.
Moreover, China leveraged artificial intelligence (AI)-driven cyber tools to automate large-scale attacks, making it harder for cybersecurity teams to detect and neutralize threats. China also increasingly deployed zero-day exploits against Taiwan’s critical infrastructure, targeting national defense systems, financial institutions, and telecom providers.
The growing cyber conflict between Beijing and Taipei has witnessed a significant escalation in recent years, with Chinese hackers reportedly infiltrating multiple Taiwanese defense contractors and conducting ransomware attacks against semiconductor firms. Taiwan has maintained that China is the real cyber aggressor, orchestrating millions of daily attacks and utilizing advanced cyber techniques to gain strategic advantages.
As tensions in cyberspace continue to rise between China and Taiwan, both nations are likely to continue investing in offensive and defensive cyber capabilities. The evolving landscape of cyberwarfare in the Asia-Pacific region underscores the importance of information warfare in the broader geopolitical struggle between these two nations.