2024 is a record-breaking year for elections around the globe, with over 60 countries home roughly half of the world’s population is set to hold national elections. On 13 January 2024, Taiwan kicked off this super-election year with its presidential and legislative elections.

At TeamT5, we are pleased to see that the election concluded smoothly, without any successful disruptions by cyber attackers. We believe this achievement is a result of the hard work and dedication of many individuals and organizations. Their collective efforts have ensured the election process remained secure and trustworthy.

**Despite the overall success, TeamT5 believes that we must not overlook the challenges posed by state-sponsored cyber threats.** Our team has worked tirelessly to identify and analyze numerous malicious activities and disinformation campaigns, particularly those associated with state-linked influence operation (IO) actors or Advanced Persistent Threat (APT) groups. This whitepaper will detail the specific tactics, techniques, and procedures (TTP) used by these actors, hoping to provide valuable insights into their operations.

The cyber threat landscape is ever-changing, with adversaries constantly improving their attacking methods. During this election cycle, we noticed that these threat actors have enhanced their capabilities, employing more sophisticated and innovative techniques to target a broader array of platforms. **This whitepaper not only shares our discoveries but also illustrates the importance of continuously updating our cyber defense strategies to stay ahead of potential threats.**

We are committed to evolve our threat intelligence to counteract these cyber threats. Through this whitepaper, we aim to share our strategic findings, hoping to equip other democracies, especially those facing upcoming elections, with better understanding of cyberattacks aiming to disrupt the democratic process. We hope it serves as a practical resource for cyber threat intelligence experts in democratic countries, helping them to anticipate and mitigate cyber threats effectively.

## Research Highlights
**1.** Prior to the 2024 elections, Taiwan has faced an array of sophisticated cyber threats, all aimed at destabilizing the democratic processes and undermining public trust in the electoral system. Overall, China-nexus actors accounted for a major part of the targeted attacks.

**2.** Chinese Advanced Persistent Threat (APT) groups have targeted multiple entities in Taiwan, especially the journalism and media industry. Notably, not only pro-democracy or pan-green media have fallen into prey. Our database suggests that domestic television operators and newspapers, some perceived as pro-unification or pro-China, have also been the primary targets.

**3.** On the other hand, China has also been weaponizing social media platforms to spread disinformation and propaganda against Taiwan. While we observed sparse suspicious activities attacking the ruling party since early 2023, it was not until November that we detected significant influence operations. We summarized three key trends of China’s influence operations during the elections:
 
(1) Expanded Target Scope
 
(2) AI-Enabled Campaigns across Various Platforms
 
(3) Fake News Sites and Whistleblower Sites

**4.** From late November 2023, we have detected China-nexus hack and leak incidents, corresponding with the following influence operations aimed at diminishing public trust toward Taiwan’s current ruling party, the Democratic Progressive Party (DPP). These campaigns mark a strategic adoption of “hack-and-leak” methods, a notable shift in hybrid warfare tactics. We highlight a significant campaign named “Operation ScoopSpy.” It is very likely that their goals are to sow chaos and discredit pro-democracy politicians regardless of which candidate or political party wins in the elections.

**5.** China’s approach to influencing Taiwan’s political landscape, particularly around the2024 elections, underscores a long-term strategy. Advanced Persistent Threat (APT) groups and influence operation (IO) actors linked to China have shown a deep understanding of their targets, indicating thorough preparation and research. This meticulous groundwork has led to a troubling synergy between cyber espionage efforts and influence operations.

 
**To receive the whole whitepaper, please fill up the form below.**

【Whitepaper】Cyber Threats against Taiwan’s 2024 Presidential Election

杜浦數位安全 TeamT5 發佈《臺灣 2024 總統大選資安威脅》白皮書（TeamT5 White Paper: Cyber Threats against Taiwan’s 2024 Presidential Election），透過「進階持續性威脅（advanced persistent threat）」與「資訊作戰（influence operation）」的雙重視角，全面剖析 2024 年臺灣大選所面臨的資安威脅。根據 TeamT5 長期以來的追查，我們持高度信心這些攻擊可能都是來自中國相關的威脅行動者。

作為網路威脅情資研究的專家， TeamT5 長期關注亞太地區駭客威脅，以協助我們的客戶掌握關鍵情資，抵禦從未間斷的網路攻擊。

**重點摘要：**
1. 中國相關威脅行動者的攻擊手法持續演進，於投票日前一週發動綿密的不實資訊攻擊，意圖動搖社會大眾對於民主選舉體制的信任。
2. 中國相關威脅行動者攻擊的目標包含不同產業，近期媒體業更是飽受攻擊。根據 TeamT5 的研究顯示，遭攻擊的媒體公司並無政治立場之分，泛綠與泛藍媒體皆有遭到攻擊。
3. 中國相關威脅行動者仍持續透過社群平台散布不實訊息。但和過去相比，其動員的社群資源更加廣泛，並進一步利用 AI 技術生成內容；同時還架設新聞通訊網站，撰寫原生內容，以大量散播不實資訊。
4. 中國相關威脅行動者還運用了「駭侵與外洩」（Hack and Leak）的手法。先竊取機密資訊後，再有計畫地透過特定管道向大眾披露，試圖操弄社會輿論風向，遭駭產業包含媒體、政府與電信。

綜合來看，中國相關威脅行動者確實能深入掌握台灣政經社會局勢的脈動，再透過進階持續性攻擊與資訊作戰的混合手法，瞄準民主社會可能的弱點。長期而言，網路攻擊的威脅，仍是台灣民主發展揮之不去的陰影。

請填寫以下表格，即可下載完整白皮書（英文）。


【白皮書】全面剖析臺灣 2024 總統大選面臨之資安威脅 

TeamT5 is a leading brand in delivering Asia Pacific intelligence. In this article, we summarize the threat landscape of advanced persistent threats (APT) in the Asia-Pacific region in 2023, not only provide annual observations, but also point out the cyber threats worth paying attention to in 2024.

>**This article is an excerpt version which summarizes key statistics. To obtain the complete threat intelligence report, you may fill up the form at the bottom to obtain the “APT Threat Landscape in APAC 2023” report. **
>
>This article is adapted from "2023 H2 Campaign Tracking Report: APT Threat Landscape in Asia". To discover similar cyber threat intelligence which is focused in Asia-Pacific region, please sign up for the trial of our threat intelligence platform ThreatVision. 
>Please indicate on the [ThreatVision page](https://teamt5.org/en/products/threatvision/?utm_source=blogs&utm_medium=website) that you would like to apply for trial.

## Preface
TeamT5’s cyber threat intelligence research based on well-built data collection and analysis flow. We collect data from multiple sources - malware databases, sandboxes, crawlers, and our threat forensic analysis platform ThreatSonar etc. With careful and rigorous analysis, we come up with intelligence reports for clients and the public to notify potential threats.

**For 2023, based on TeamT5 data collection and analysis, we found:**
- 411 attack operations in 39 countries
- 60 known adversary groups tracked
- 210 malware / hacking tools used

 
![01_apt-threat-landscape-in-apac-2023.jpg](https://uploads.teamt5.org/upload/original/01_apt-threat-landscape-in-apac-2023.jpg)
 

## Closer Look at Exploits
In 2023, we have observed at least 37 CVE exploits that were abused in the wild by threat actors. We see a tendency that more and more exploits targeting edge devices appear, which we marked with color yellow in the right table. These edge devices have no security products to monitor them so threat actors could effectively intrude their target network environments. 

There are still lots of attacks achieved spear phishing emails but the corresponding tricks are old fashioned, such as:
- Template Injection
- Microsoft LNK 
- CHM
- Macro documents
- Phishing
- CVE-2018-0798, CVE-2022-30190, CVE-2023-38831

 
![02_apt-threat-landscape-in-apac-2023.jpg](https://uploads.teamt5.org/upload/original/02_apt-threat-landscape-in-apac-2023.jpg)
 

##Closer Look at Malwares
We listed the malware distribution in all attacks. Below is the ranking of **Top 10 Malwares in 2023 H1** and **Top 15 Malwares in 2023 H2**.

 
![03_apt-threat-landscape-in-apac-2023.jpg](https://uploads.teamt5.org/upload/original/03_apt-threat-landscape-in-apac-2023.jpg)
 

We compare these two ranks with 4 aspects - Shared tools, Webshell, Cross platform RAT, Shared Quartermaster of Chinese APT. Here is our analysis.

**1. About shared tools **

There are more and more threat actors adopting public or open source tools in their operations. This could effectively reduce their effort to develop their own weapons and also increase the barrier for researchers like us to achieve an effective attribution.

 
![04_apt-threat-landscape-in-apac-2023.jpg](https://uploads.teamt5.org/upload/original/04_apt-threat-landscape-in-apac-2023.jpg)
 

**2. About Webshell**

Web server exploitations have become more and more common nowadays and the importance of webshell keeps increasing. Godzilla, a full featured webshell made by Chinese threat actors, has become the favorite of Chinese APT. It is usually deployed jointly with a small webshell like China Chopper to effectively bypass detections.

 
![05_apt-threat-landscape-in-apac-2023.jpg](https://uploads.teamt5.org/upload/original/05_apt-threat-landscape-in-apac-2023.jpg)
 

**3. About Cross Platform RAT**

There are more and more cross platform or multi platform RAT. The reason behind is nowadays threat actors don’t only focus on Windows platform but will intrude from every possible platform like Linux, MacOS or even Android or iOS.

 
![06_apt-threat-landscape-in-apac-2023.jpg](https://uploads.teamt5.org/upload/original/06_apt-threat-landscape-in-apac-2023.jpg)
 

**4. Shared Quartermaster of Chinese APT**

We have observed an interesting code or feature sharing between different malware used by Chinese APT. This kind of finding makes us highly suspect there is an entity or even private company that is responsible for producing all these remote administration tools and distributing them secretly to various Chinese APT groups.

 
![07_apt-threat-landscape-in-apac-2023.jpg](https://uploads.teamt5.org/upload/original/07_apt-threat-landscape-in-apac-2023.jpg)
 

##Closer Look at Targeted Countries / Regions by APT Groups

From countries / regions aspects, our data shows Taiwan, South Korea, and Japan are the most targeted countries by APT groups. Following them are countries in South or Southeast Asia, such as Vietnam, Philippine, Thailand, or Malaysia, etc. 

 
![08_09_apt-threat-landscape-in-apac-2023.jpg](https://uploads.teamt5.org/upload/original/08_09_apt-threat-landscape-in-apac-2023.jpg)
 

Based on this statistic, we will discuss 3 different victim areas and corresponding active threat actors, they are Taiwan, Northeast Asia, and South/Southeast Asia.

###No.1 Targeted Country / Region: Taiwan
Taiwan is the most targeted country in Asia Pacific. This chart shows the distribution of targeted industry sectors. Compared with our data in the past 2 years (2021-2022), we don’t see dramastic changes. Government, IT, education, or critical infrastructure are still on the top list. 

People might wonder why APT actors are so interested in the IT sector. We believe the reason is that there are more and more supply chain attacks and these IT companies possess good channels or privileges to access big companies or government entities. It makes the IT sector a perfect hopping point. 

And one interesting phenomena we have observed is the surging attack against the healthcare industry. We suspect the reason behind the attacks are the Taiwanese government’s effort to join WHA, or China’s ambition to collect personal identification information.

 
![10_apt-threat-landscape-in-apac-2023.jpg](https://uploads.teamt5.org/upload/original/10_apt-threat-landscape-in-apac-2023.jpg)
 

In the threat actors' part, there are at least 21 known groups aiming at Taiwan in 2023. Among them are Huapi, Amoeba, and Polaris - they are old faces that are on the top list hitting Taiwan. In the meantime, there is a new face, SLIME13 (also known as FlaxTyphoon by Microsoft). 

SLIME13’s operations became so wild in 2023 that we have observed more than 100 victim entities in Taiwan. This APT group also aggressively expands their attacks to other countries such as Hong Kong, Japan or South Korea, etc.

 
![11_apt-threat-landscape-in-apac-2023.jpg](https://uploads.teamt5.org/upload/original/11_apt-threat-landscape-in-apac-2023.jpg)
 

###No.2 Targeted Country / Region: Northeast Asia

In the Northeast Asia region, the geopolitical situation has changed dramatically in the past 2 years because Japan and South Korea are united together with the U.S. to defend against their enemies in the neighborhood. 

For this reason, the topmost targeted sectors include government, think tank, and education. These sectors often hold political documents or do sensitive research for their governments. Another interesting phenomena would be China’s attacks against South Korea which were stealthy and low profile in the past. But now China’s attacks turned to become high profile and public, threat actors such as 曉騎營 or 騰蛇 are some good example. Cryptocurrency sectors in this area are targeted and infiltrated by North Korean actors.

 
![12_apt-threat-landscape-in-apac-2023.jpg](https://uploads.teamt5.org/upload/original/12_apt-threat-landscape-in-apac-2023.jpg)
 


For the threat actors part, China and North Korea actors dominate this area. North Korean actors are busy collecting geopolitical intelligence and another mission: earning money for their country. In contrast, Chinese APT operations become more stealthy and harder to detect; there are several big campaigns of Barracuda, Fortigate, Citrix or ArrayVPN vulnerabilities. Many of the events are still under investigation or even uncovered yet. 

 
![13_apt-threat-landscape-in-apac-2023.jpg](https://uploads.teamt5.org/upload/original/13_apt-threat-landscape-in-apac-2023.jpg)
 

###No.3 Targeted Country / Region: South Asia & Southeast Asia
The third target country / region is the South Asia and Southeast Asia region. Our observations show attacks in this area are driven by issues of the South China Sea, border issues or belt & road and shift of international organization’s factory. That was reflected in the most targeted sectors - military and critical infrastructure are all closely bundled with these issues.

In the southeast Asia region, threat actors from China such as Polaris, Amoeba, Gudiao and Vietnam originated groups such as SLIME43 or OceanLotus are very active in these regions. The interesting part regarding Vietnamese APT groups is that they are not only a big concern of neighboring countries but also the domestic people in Vietnam. Our engagement with Vietnamese customers shows their great fear of being intruded by OceanLotus.

 
![14_apt-threat-landscape-in-apac-2023.jpg)](https://uploads.teamt5.org/upload/original/14_apt-threat-landscape-in-apac-2023.jpg)
 

In the South Asia region, China is also busy attacking and monitoring their neighbors. People might consider Pakistan to be a good friend of China so they could be spared. In contrast, our data shows Pakistan to be highly targeted and infiltrated by China. Another interesting thing is that India and Pakistan both have their own cyber actors and they are fighting with each other a lot.

 
![15_apt-threat-landscape-in-apac-2023.jpg](https://uploads.teamt5.org/upload/original/15_apt-threat-landscape-in-apac-2023.jpg)
 

##Conslusion
2023 is a busy year, both for threat actors and defenders. Also, more tensions in geopolitics will keep bringing more cyber attacks. 

New technology might solve human’s problems, but not for attack and defense scenarios. New technology becomes a new opportunity for attackers as well (e.g. cloud services, AI). The reason is that targeted attacks are human-driven; defenders should address human problems by adopting threat intelligence.

No one can be spared in the war in the cyber world, so be prepared!

 
 

>**This article is an excerpt version which summarizes key statistics. To obtain the complete threat intelligence report, you may fill up the form at the bottom to obtain the “APT Threat Landscape in APAC 2023” report. **
>
>This article is adapted from "2023 H2 Campaign Tracking Report: APT Threat Landscape in Asia". To discover similar cyber threat intelligence which is focused in Asia-Pacific region, please sign up for the trial of our threat intelligence platform ThreatVision. 
>Please indicate on the [ThreatVision page](https://teamt5.org/en/products/threatvision/?utm_source=blogs&utm_medium=website) that you would like to apply for trial.

APT Threat Landscape in APAC 2023:  New Strategy, New Normal, New Techniques, and New Territory

TeamT5 杜浦數位安全為專精亞太地區威脅情資的領導品牌。於此篇文章中，我們總結 2023 年亞太地區進階持續性威脅 (APT) 的威脅態勢，不僅提出年度觀察，更指出未來一年值得留意的資安威脅。

>本篇文章為節錄版，摘述關鍵數據與威脅情資分析。欲取得完整《2023年威脅態勢回顧》報告，您可以直接填寫文章末尾表格，我們將透過電子郵件、寄送給您。

>本篇文章改寫自《2023 H2 Campaign Tracking Report: APT Threat Landscape in Asia》，探索與此相關的報告與更多亞太地區的威脅情資，立刻申請威脅情資平台 ThreatVision 試用機會。請在 [ThreatVision](https://teamt5.org/tw/products/threatvision/?utm_source=blogs&utm_medium=website) 頁面說明您希望申請試用。


## Preface
TeamT5’s cyber threat intelligence research based on well-built data collection and analysis flow. We collect data from multiple sources - malware databases, sandboxes, crawlers, and our threat forensic analysis platform ThreatSonar etc. With careful and rigorous analysis, we come up with intelligence reports for clients and the public to notify potential threats.

**For 2023, based on TeamT5 data collection and analysis, we found:**
- 411 attack operations in 39 countries
- 60 known adversary groups tracked
- 210 malware / hacking tools used

 
![01_apt-threat-landscape-in-apac-2023.jpg](https://uploads.teamt5.org/upload/original/01_apt-threat-landscape-in-apac-2023.jpg)
 

## Closer Look at Exploits
In 2023, we have observed at least 37 CVE exploits that were abused in the wild by threat actors. We see a tendency that more and more exploits targeting edge devices appear, which we marked with color yellow in the right table. These edge devices have no security products to monitor them so threat actors could effectively intrude their target network environments. 

There are still lots of attacks achieved spear phishing emails but the corresponding tricks are old fashioned, such as:
- Template Injection
- Microsoft LNK 
- CHM
- Macro documents
- Phishing
- CVE-2018-0798, CVE-2022-30190, CVE-2023-38831

 
![02_apt-threat-landscape-in-apac-2023.jpg](https://uploads.teamt5.org/upload/original/02_apt-threat-landscape-in-apac-2023.jpg)
 

##Closer Look at Malwares
We listed the malware distribution in all attacks. Below is the ranking of **Top 10 Malwares in 2023 H1** and **Top 15 Malwares in 2023 H2**.

 
![03_apt-threat-landscape-in-apac-2023.jpg](https://uploads.teamt5.org/upload/original/03_apt-threat-landscape-in-apac-2023.jpg)
 

We compare these two ranks with 4 aspects - Shared tools, Webshell, Cross platform RAT, Shared Quartermaster of Chinese APT. Here is our analysis.

**1. About shared tools **

There are more and more threat actors adopting public or open source tools in their operations. This could effectively reduce their effort to develop their own weapons and also increase the barrier for researchers like us to achieve an effective attribution.

 
![04_apt-threat-landscape-in-apac-2023.jpg](https://uploads.teamt5.org/upload/original/04_apt-threat-landscape-in-apac-2023.jpg)
 

**2. About Webshell**

Web server exploitations have become more and more common nowadays and the importance of webshell keeps increasing. Godzilla, a full featured webshell made by Chinese threat actors, has become the favorite of Chinese APT. It is usually deployed jointly with a small webshell like China Chopper to effectively bypass detections.

 
![05_apt-threat-landscape-in-apac-2023.jpg](https://uploads.teamt5.org/upload/original/05_apt-threat-landscape-in-apac-2023.jpg)
 

**3. About Cross Platform RAT**

There are more and more cross platform or multi platform RAT. The reason behind is nowadays threat actors don’t only focus on Windows platform but will intrude from every possible platform like Linux, MacOS or even Android or iOS.

 
![06_apt-threat-landscape-in-apac-2023.jpg](https://uploads.teamt5.org/upload/original/06_apt-threat-landscape-in-apac-2023.jpg)
 

**4. Shared Quartermaster of Chinese APT**

We have observed an interesting code or feature sharing between different malware used by Chinese APT. This kind of finding makes us highly suspect there is an entity or even private company that is responsible for producing all these remote administration tools and distributing them secretly to various Chinese APT groups.

 
![07_apt-threat-landscape-in-apac-2023.jpg](https://uploads.teamt5.org/upload/original/07_apt-threat-landscape-in-apac-2023.jpg)
 

##Closer Look at Targeted Countries / Regions by APT Groups

From countries / regions aspects, our data shows Taiwan, South Korea, and Japan are the most targeted countries by APT groups. Following them are countries in South or Southeast Asia, such as Vietnam, Philippine, Thailand, or Malaysia, etc. 

 
![08_09_apt-threat-landscape-in-apac-2023.jpg](https://uploads.teamt5.org/upload/original/08_09_apt-threat-landscape-in-apac-2023.jpg)
 

Based on this statistic, we will discuss 3 different victim areas and corresponding active threat actors, they are Taiwan, Northeast Asia, and South/Southeast Asia.

###No.1 Targeted Country / Region: Taiwan
Taiwan is the most targeted country in Asia Pacific. This chart shows the distribution of targeted industry sectors. Compared with our data in the past 2 years (2021-2022), we don’t see dramastic changes. Government, IT, education, or critical infrastructure are still on the top list. 

People might wonder why APT actors are so interested in the IT sector. We believe the reason is that there are more and more supply chain attacks and these IT companies possess good channels or privileges to access big companies or government entities. It makes the IT sector a perfect hopping point. 

And one interesting phenomena we have observed is the surging attack against the healthcare industry. We suspect the reason behind the attacks are the Taiwanese government’s effort to join WHA, or China’s ambition to collect personal identification information.

 
![10_apt-threat-landscape-in-apac-2023.jpg](https://uploads.teamt5.org/upload/original/10_apt-threat-landscape-in-apac-2023.jpg)
 

In the threat actors' part, there are at least 21 known groups aiming at Taiwan in 2023. Among them are Huapi, Amoeba, and Polaris - they are old faces that are on the top list hitting Taiwan. In the meantime, there is a new face, SLIME13 (also known as FlaxTyphoon by Microsoft). 

SLIME13’s operations became so wild in 2023 that we have observed more than 100 victim entities in Taiwan. This APT group also aggressively expands their attacks to other countries such as Hong Kong, Japan or South Korea, etc.

 
![11_apt-threat-landscape-in-apac-2023.jpg](https://uploads.teamt5.org/upload/original/11_apt-threat-landscape-in-apac-2023.jpg)
 

###No.2 Targeted Country / Region: Northeast Asia

In the Northeast Asia region, the geopolitical situation has changed dramatically in the past 2 years because Japan and South Korea are united together with the U.S. to defend against their enemies in the neighborhood. 

For this reason, the topmost targeted sectors include government, think tank, and education. These sectors often hold political documents or do sensitive research for their governments. Another interesting phenomena would be China’s attacks against South Korea which were stealthy and low profile in the past. But now China’s attacks turned to become high profile and public, threat actors such as 曉騎營 or 騰蛇 are some good example. Cryptocurrency sectors in this area are targeted and infiltrated by North Korean actors.

 
![12_apt-threat-landscape-in-apac-2023.jpg](https://uploads.teamt5.org/upload/original/12_apt-threat-landscape-in-apac-2023.jpg)
 


For the threat actors part, China and North Korea actors dominate this area. North Korean actors are busy collecting geopolitical intelligence and another mission: earning money for their country. In contrast, Chinese APT operations become more stealthy and harder to detect; there are several big campaigns of Barracuda, Fortigate, Citrix or ArrayVPN vulnerabilities. Many of the events are still under investigation or even uncovered yet. 

 
![13_apt-threat-landscape-in-apac-2023.jpg](https://uploads.teamt5.org/upload/original/13_apt-threat-landscape-in-apac-2023.jpg)
 

###No.3 Targeted Country / Region: South Asia & Southeast Asia
The third target country / region is the South Asia and Southeast Asia region. Our observations show attacks in this area are driven by issues of the South China Sea, border issues or belt & road and shift of international organization’s factory. That was reflected in the most targeted sectors - military and critical infrastructure are all closely bundled with these issues.

In the southeast Asia region, threat actors from China such as Polaris, Amoeba, Gudiao and Vietnam originated groups such as SLIME43 or OceanLotus are very active in these regions. The interesting part regarding Vietnamese APT groups is that they are not only a big concern of neighboring countries but also the domestic people in Vietnam. Our engagement with Vietnamese customers shows their great fear of being intruded by OceanLotus.

 
![14_apt-threat-landscape-in-apac-2023.jpg)](https://uploads.teamt5.org/upload/original/14_apt-threat-landscape-in-apac-2023.jpg)
 

In the South Asia region, China is also busy attacking and monitoring their neighbors. People might consider Pakistan to be a good friend of China so they could be spared. In contrast, our data shows Pakistan to be highly targeted and infiltrated by China. Another interesting thing is that India and Pakistan both have their own cyber actors and they are fighting with each other a lot.

 
![15_apt-threat-landscape-in-apac-2023.jpg](https://uploads.teamt5.org/upload/original/15_apt-threat-landscape-in-apac-2023.jpg)
 

##Conslusion
2023 is a busy year, both for threat actors and defenders. Also, more tensions in geopolitics will keep bringing more cyber attacks. 

New technology might solve human’s problems, but not for attack and defense scenarios. New technology becomes a new opportunity for attackers as well (e.g. cloud services, AI). The reason is that targeted attacks are human-driven; defenders should address human problems by adopting threat intelligence.

No one can be spared in the war in the cyber world, so be prepared!


 
 


 

>本篇文章為節錄版，摘述關鍵數據與威脅情資分析。欲取得完整《2023年威脅態勢回顧》報告，您可以直接填寫文章末尾表格，我們將透過電子郵件、寄送給您。

>本篇文章改寫自《2023 H2 Campaign Tracking Report: APT Threat Landscape in Asia》，探索與此相關的報告與更多亞太地區的威脅情資，立刻申請威脅情資平台 ThreatVision 試用機會。請在 [ThreatVision](https://teamt5.org/tw/products/threatvision/?utm_source=blogs&utm_medium=website) 頁面說明您希望申請試用。

【白皮書】全面剖析臺灣 2024 總統大選面臨之資安威脅

Related Post

2023年威脅態勢回顧: 網路攻擊的新策略、新常態、新技術和新領域【英文威脅情資報告】