Taiwan critical infrastructure targeted by hackers with possible ties to Volt Typhoon

Cisco Talos and ESET report that China-linked operators (tagged UAT-5918 and FishMonger) have conducted sustained cyber-espionage campaigns since at least 2023 against Taiwanese critical infrastructure sectors — including telecommunications, healthcare, and IT — exploiting unpatched web/application servers to gain long-term access, steal credentials and data, and establish persistent administrative access, with overlaps to known APTs such as Volt Typhoon and Flax Typhoon and potential for disruptive operations.