Chinese hackers hit Taiwan semiconductor manufacturing in spear phishing campaign

• Proofpoint saw UNK_FistBump, UNK_DropPitch, and UNK_SparkyCarp engaging in spear-phishing
• The groups were trying to deploy different backdoors and malware
• The campaign is part of a wider effort to "achieve semiconductor self-sufficiency" experts claim

Multiple Chinese state-sponsored threat actors have been coordinating attacks on the Taiwanese semiconductor industry, hitting manufacturing, supply chain, and financial investment analysis firms across the country.

This is according to cybersecurity researchers Proofpoint, who claim to have observed at least three different groups participating in the campaign.

The groups are tracked as UNK_FistBump, UNK_DropPitch, and UNK_SparkyCarp. Sometimes, different security vendors label the same groups differently, but these seem to be new entrants in the cybercriminal world.

A fourth player

Their tactics, techniques, and ...