China Suspected of Cyberattacks Targeting Taiwan Election Candidate
Taiwan's NSB investigates suspected Chinese cyberattacks targeting DPP candidate Puma Shen ahead of the November 28 elections.
Tensions between Taipei and Beijing have escalated as Taiwan’s National Security Bureau (NSB) investigates suspected China cyberattacks Taiwan elections interference. The target of these digital assaults is Puma Shen, the Democratic Progressive Party (DPP) candidate for the Taipei mayoral race, sparking serious concerns over efforts to disrupt the island's democratic process ahead of the November 28 polls.
NSB Launches High-Level Investigation
The National Security Bureau has confirmed that intelligence teams are currently working together to uncover the extent of the interference. Speaking before the legislature’s Foreign Affairs and National Defence Committee, NSB Deputy Director-General Chen Sung-chi emphasized that the bureau is deploying all necessary resources to ensure the upcoming elections are conducted peacefully and securely.
Chen further warned that the investigation is not merely a security audit; it could lead to criminal proceedings against any individuals found responsible for the breaches.
Inside the Digital Assault
The campaign office of Puma Shen has detailed a systematic and sustained effort to compromise its digital infrastructure. According to the campaign, the attacks began last Friday, targeting both internal staff systems and public-facing websites.
The Initial Breach
Hackers reportedly exploited a specific vulnerability in the website’s file-upload function. This flaw allowed the attackers to:
- Gain administrative access to the hosting server.
- Install malicious backdoors to maintain persistent access.
Fortunately, the campaign's internal systems remained secure. Because the compromised server did not store login credentials or the internal platform, the attackers were unable to penetrate the core of the campaign's private operations.
The 'Ocean Wave' Attack
Even after the initial breach was neutralized, the attackers launched a second wave of assaults. This time, they targeted a newly launched website created for the 'Ocean Wave' initiative, which was designed to let supporters register for campaign events.
The scale of the attack was massive: within just one hour of the platform going live, it was hit with over 70,000 requests for authentication codes. These requests were traced back to foreign IP addresses, further fueling suspicions of state-sponsored interference from China.
Swift Response and Recovery
Upon discovering the breaches, the campaign office took immediate action to secure its data and infrastructure. The recovery process included:
- Identifying and removing all malicious backdoors.
- Deleting fraudulent administrator accounts created by the hackers.
- Performing a comprehensive reset of all passwords.
- Strengthening overall cybersecurity protocols.
To stop the flood of fake registration requests for the 'Ocean Wave' initiative, administrators modified the registration mechanism to make valid account authentication mandatory. The campaign has since confirmed that all affected websites have been fully restored and reinforced against future threats.