Hackers aligned with objectives of the Chinese government have been linked to an organized supply chain attack on Taiwan’s financial sector.

These attacks first commenced at the end of November 2021, with the intrusions attributed to a threat actor tracked as APT10, also known as Stone Panda, the MenuPass group and Bronze Riverside, and known to be active since at least 2009.

As published by CyCraft, the second wave of attacks hit a peak between February 10 and 13, 2022, as the wide-ranging supply chain compromise specifically targeted the software systems of financial institutions, resulting in “abnormal cases of placing orders.”

This infiltration activity has been codenamed “Operation Cache Panda,” and is said to exploit a vulnerability in the web management interface of the unnamed securities software that has a market share of over 80% in Taiwan, using it to deploy a web shell that acts as a conduit for implanting the Quasar RAT on the compromised system with the goal of stealing sensitive information.



Quasar RAT is a publicly available open-source remote access trojan (RAT) written in .NET. Possessing features such as capturing screenshots, recording webcam, editing registry, keylogging, and stealing passwords. In addition, the attacks leveraged a Chinese cloud file sharing service called wenshushu.cn to download auxiliary tools.

The disclosure comes as Taiwan’s Parliament, the Executive Yuan, unveiled draft amendments to national security laws aimed at combating Chinese economic and industrial espionage efforts. To that end, unapproved use of critical national technologies and trade secrets outside of the country could carry up to a 12-year prison sentence.

Furthermore, individuals and organizations that have been entrusted or subsidized by the Taiwanese government to conduct operations involving critical national technologies are expected to secure prior government approval for any trips to China, failing which could incur monetary fines of up to NT$10 million (~US$359,000).

This attacks come to light as the Taiwanese parliament unveiled draft amendments to national security laws aimed at combating Chinese economic and industrial espionage efforts. With this, unapproved use of critical national technologies and trade secrets outside of the country could carry up to a 12-year prison sentence.

Also, individuals and organizations that have been entrusted or subsidized by the Taiwanese government to conduct operations involving critical national technologies are expected to secure prior government approval for any trips to China, failing which could incur monetary fines of up to NT$10 million (USD$359,000).


Source : https://slytech.org/2022/02/22/taiwanese-financial-trading-sector-suffers-cyber-attack-by-chinese-hackers/

✅