CyCraft Report: Taiwan Threat Trends

Taipei, Taiwan — 19 March 2021 — CyCraft Technology, the fastest-growing cybersecurity firm in Asia, announced the release of their Taiwan Threat Trends Report, which unites the insights and notable observations of CyCraft Taiwan’s incident response (IR), threat hunting, and support teams. The report not only provides an in-depth look into the current state of the Taiwan cybersecurity landscape but also highlights the trending techniques, tactics, and procedures (TTP) employed by threat groups targeting organizations within that landscape.

Download the CyCraft Taiwan Threat Trends Report here.

The CyCraft Taiwan Threat Trends Report reveals the extensive impact the pandemic has had on cybersecurity maturity in Taiwan environments, including government agencies, high-tech firms, top financial institutions, entities in the entertainment industry, semiconductor manufacturers, and other notable targets in critical infrastructure.

Notable findings include:
  • DLP Abuse — As DLP software is widely deployed in sensitive organizations, is daily-used software, and often has high privilege, DLP vendors and customers both need to constantly be striving on hardening security to maintain resilience even in the worst of situations.
  • Trusted Certificate Abuse — Taking a zero-trust approach is an essential step to hardening security. Abusing trusted certificates can be devastating to an environment relying solely on white and blacklists with no behavior monitoring security solution in place. Although abusing trusted certificates is difficult for attackers, it is within the realm of possibility and has been observed multiple times in Taiwan.
  • VPN Abuse — With the global pandemic triggering the dramatic demand for remote work solutions, VPNs have seen a surge in use in 2020 by both organizations and threat actors. VPNs were widely used to construct a jumpbox into an organization’s environment as well as serve as a command and control channel.
“Single solution security controls are not panaceas, be they an isolated server or preventive solutions. Accurate and actionable intelligence, thorough visibility, and automated detection and response are necessary tools to defend against not only modern attacks but also attacks in the coming decade.”

CyCraft, Taiwan Threat Trends

Download the CyCraft Taiwan Threat Trends Report here.

Writer: CyCRaft

CyCraftについて

CyCraft(サイクラフト)は、AIによる自動化技術を専門とするサイバーセキュリティ企業。2017年に設立され、台湾に本社、日本とシンガポールに海外拠点を持つ。アジア太平洋地域の政府機関、警察・防衛機関、銀行、ハイテク製造業にサービスを提供している。CyCraft の AI技術 と機械学習技術によるソリューションが評価され、CID グループ とテマセク・ホールディングス旗下のパビリオンキャピタルから強力なサポートを獲得し、また、国際的トップ研究機構である Gartner、 IDC、Frost & Sullivan などから複数の項目において評価を受けている他、国内外の著名な賞をいくつも受賞している。また、国内外を含む複数のセキュリティコミュニティ、カンファレンスに参画し、長年にわたりセキュリティ業界の発展に尽力している。

CyCraft ニュースレター購読

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
[申し込み]をクリックすることで、CyCraftのプライバシーポリシーにしたがって個人情報が使用されることに同意したこととなります。購読の解除はいつでも可能です。