{ "id": "d8af4024-4f8b-42d9-86da-ca3e0fca6c89", "created_at": "2026-04-06T00:21:42.152341Z", "updated_at": "2026-04-10T03:33:23.932916Z", "deleted_at": null, "sha1_hash": "398726e87ce0e352a049edf88cb2f06e20e6e755", "title": "China claims Taiwan, not civilians, behind web vandalism", "llm_title": "", "authors": "", "file_creation_date": "0001-01-01T00:00:00Z", "file_modification_date": "0001-01-01T00:00:00Z", "file_size": 36178, "plain_text": "China claims Taiwan, not civilians, behind web vandalism\r\nBy Laura Dobberstein\r\nPublished: 2024-09-25 · Archived: 2026-04-02 12:10:04 UTC\r\nTaiwan has dismissed Chinese allegations that its military sponsored a recent wave of anti-Beijing cyber attacks.\r\nChina's Ministry of State Security made the allegations on Monday using its official WeChat channel. The\r\nMinistry alleged that a group called Anonymous64 was \"trying to obtain control authority over portal websites,\r\noutdoor electronic screens, network television, etc.\" in mainland China, Hong Kong and Macao, to display content\r\ncritical of China's system of government.\r\nThe Ministry wrote that its investigations confirmed that the Anonymous64 organization was not an ordinary\r\nhacker, but part of Taiwan's Information, Communications, and Electronic Force Command (ICEFCOM) – or\r\ncyber warfare wing. Beijing has named and posted photos of three Taiwanese individuals it claimed were under\r\ninvestigation for involvement in the cyber attacks.\r\nAccording to Taiwan's Ministry of National Defense the mainland's accusations are \"not true.\"\r\nAnonymous64 often posts content critical of the Chinese Communist Party and People's Liberation Army, plus\r\nscreenshots of websites it claims to have defaced. China's national security Ministry asserted that many of those\r\nscreenshots were fake, and that the websites Anonymous64 claims to have hit have little or no traffic.\r\nASML could brick Taiwan's chipmaking machines in case of uninvited guests\r\nTSMC, Samsung reportedly eye UAE's silicon fields for fab expansion\r\nChina's APT41 crew adds a stealthy malware loader and fresh backdoor to its toolbox\r\nTaiwan's new president wants to upgrade from 'silicon island' to 'AI island'\r\n\"The state security organs remind developers of internet audio and video systems and web portals, as well as\r\noperation and maintenance units, and internet users, to implement network security precautionary measures,\r\npromptly update and upgrade systems, plug technical loopholes, increase password strength, strengthen\r\ninspections and inspections, and strictly prevent all kinds of network attack activities,\" wrote the Ministry.\r\nChina views Taiwan as a breakaway province, while Taiwan sees itself as a sovereign nation. Most countries\r\naround the world treat Taiwan as if it is sovereign – but without the niceties that amount to formal recognition, so\r\nas not to anger Beijing.\r\n\"The reunification of the motherland is the general trend of history. The vain attempt of the Taiwan authorities to\r\nprovoke and seek 'independence' and confront the mainland is doomed to a dead end,\" warned the Ministry.\r\nOn Monday, Anonymous64 linked to a state-sponsored media post about the accusation, alongside a GIF of a man\r\nlaughing. ®\r\nhttps://www.theregister.com/2024/09/25/china_anonymous_64_taiwan_accusations/\r\nPage 1 of 2\n\nSource: https://www.theregister.com/2024/09/25/china_anonymous_64_taiwan_accusations/\r\nhttps://www.theregister.com/2024/09/25/china_anonymous_64_taiwan_accusations/\r\nPage 2 of 2", "extraction_quality": 1, "language": "EN", "sources": [ "MISPGALAXY", "Malpedia" ], "references": [ "https://www.theregister.com/2024/09/25/china_anonymous_64_taiwan_accusations/" ], "report_names": [ "china_anonymous_64_taiwan_accusations" ], "threat_actors": [ { "id": "9de1979b-40fc-44dc-855d-193edda4f3b8", "created_at": "2025-08-07T02:03:24.92723Z", "updated_at": "2026-04-10T02:00:03.755516Z", "deleted_at": null, "main_name": "GOLD LOCUST", "aliases": [ "Anunak", "Carbanak", "Carbon Spider ", "FIN7 ", "Silicon " ], "source_name": "Secureworks:GOLD LOCUST", "tools": [ "Carbanak" ], "source_id": "Secureworks", "reports": null }, { "id": "cfdd35af-bd12-4c03-8737-08fca638346d", "created_at": "2022-10-25T16:07:24.165595Z", "updated_at": "2026-04-10T02:00:04.887031Z", "deleted_at": null, "main_name": "Sea Turtle", "aliases": [ "Cosmic Wolf", "Marbled Dust", "Silicon", "Teal Kurma", "UNC1326" ], "source_name": "ETDA:Sea Turtle", "tools": [ "Drupalgeddon" ], "source_id": "ETDA", "reports": null }, { "id": "33ae2a40-02cd-4dba-8461-d0a50e75578b", "created_at": "2023-01-06T13:46:38.947314Z", "updated_at": "2026-04-10T02:00:03.155091Z", "deleted_at": null, "main_name": "Sea Turtle", "aliases": [ "UNC1326", "COSMIC WOLF", "Marbled Dust", "SILICON", "Teal Kurma" ], "source_name": "MISPGALAXY:Sea Turtle", "tools": [], "source_id": "MISPGALAXY", "reports": null }, { "id": "4d5f939b-aea9-4a0e-8bff-003079a261ea", "created_at": "2023-01-06T13:46:39.04841Z", "updated_at": "2026-04-10T02:00:03.196806Z", "deleted_at": null, "main_name": "APT41", "aliases": [ "WICKED PANDA", "BRONZE EXPORT", "Brass Typhoon", "TG-2633", "Leopard Typhoon", "G0096", "Grayfly", "BARIUM", "BRONZE ATLAS", "Red Kelpie", "G0044", "Earth Baku", "TA415", "WICKED SPIDER", "HOODOO", "Winnti", "Double Dragon" ], "source_name": "MISPGALAXY:APT41", "tools": [], "source_id": "MISPGALAXY", "reports": null }, { "id": "e698860d-57e8-4780-b7c3-41e5a8314ec0", "created_at": "2022-10-25T15:50:23.287929Z", "updated_at": "2026-04-10T02:00:05.329769Z", "deleted_at": null, "main_name": "APT41", "aliases": [ "APT41", "Wicked Panda", "Brass Typhoon", "BARIUM" ], "source_name": "MITRE:APT41", "tools": [ "ASPXSpy", "BITSAdmin", "PlugX", "Impacket", "gh0st RAT", "netstat", "PowerSploit", "ZxShell", "KEYPLUG", "LightSpy", "ipconfig", "sqlmap", "China Chopper", "ShadowPad", "MESSAGETAP", "Mimikatz", "certutil", "njRAT", "Cobalt Strike", "pwdump", "BLACKCOFFEE", "MOPSLED", "ROCKBOOT", "dsquery", "Winnti for Linux", "DUSTTRAP", "Derusbi", "ftp" ], "source_id": "MITRE", "reports": null }, { "id": "2a24d664-6a72-4b4c-9f54-1553b64c453c", "created_at": "2025-08-07T02:03:24.553048Z", "updated_at": "2026-04-10T02:00:03.787296Z", "deleted_at": null, "main_name": "BRONZE ATLAS", "aliases": [ "APT41 ", "BARIUM ", "Blackfly ", "Brass Typhoon", "CTG-2633", "Earth Baku ", "GREF", "Group 72 ", "Red Kelpie ", "TA415 ", "TG-2633 ", "Wicked Panda ", "Winnti" ], "source_name": "Secureworks:BRONZE ATLAS", "tools": [ "Acehash", "CCleaner v5.33 backdoor", "ChinaChopper", "Cobalt Strike", "DUSTPAN", "Dicey MSDN", "Dodgebox", "ForkPlayground", "HUC Proxy Malware (Htran)" ], "source_id": "Secureworks", "reports": null }, { "id": "62b1b01f-168d-42db-afa1-29d794abc25f", "created_at": "2025-04-23T02:00:55.22426Z", "updated_at": "2026-04-10T02:00:05.358041Z", "deleted_at": null, "main_name": "Sea Turtle", "aliases": [ "Sea Turtle", "Teal Kurma", "Marbled Dust", "Cosmic Wolf", "SILICON" ], "source_name": "MITRE:Sea Turtle", "tools": [ "SnappyTCP" ], "source_id": "MITRE", "reports": null }, { "id": "b6b3b213-19f1-49b1-bf1f-2cd19097e738", "created_at": "2024-11-03T02:00:03.627786Z", "updated_at": "2026-04-10T02:00:03.727811Z", "deleted_at": null, "main_name": "Anonymous64", "aliases": [ "Anonymous 64" ], "source_name": "MISPGALAXY:Anonymous64", "tools": [], "source_id": "MISPGALAXY", "reports": null } ], "ts_created_at": 1775434902, "ts_updated_at": 1775792003, "ts_creation_date": 0, "ts_modification_date": 0, "files": { "pdf": "https://archive.orkl.eu/398726e87ce0e352a049edf88cb2f06e20e6e755.pdf", "text": "https://archive.orkl.eu/398726e87ce0e352a049edf88cb2f06e20e6e755.txt", "img": "https://archive.orkl.eu/398726e87ce0e352a049edf88cb2f06e20e6e755.jpg" } }