Taiwan’s state-owned energy company CPC Corp. suffers ransomware attack

In energy-import-dependent Taiwan, the CPC Corp. is a high-value target.

Ransomware has struck the computer systems of Taiwan’s state-owned energy company, CPC Corp., according to local media and private forensic reports reviewed by CyberScoop.

CPC Corp., an important national asset responsible for delivering oil products and importing liquefied natural gas (LNG), said Tuesday that, after hackers attacked its IT network, the company had restored some of it computers and servers. Although the attack didn’t affect the company’s energy production, it did disrupt some customers’ efforts to use CPC Corp.’s payment cards to purchase gas.

In Taiwan, CPC represents a high-value target for malicious hackers. Taiwan is heavily reliant on imports for its energy needs, and the company has invested in a number of offshore oil and gas projects.

CPC’s official statement did not mention ransomware, but private-sector reports obtained by CyberScoop shed more light on the incident.

Two of the malicious files used in the attack are detected as ransomware on VirusTotal, the public malware analysis repository, according to a private analysis shared with CyberScoop. The report, distributed to Taiwanese security professionals on Tuesday, refers to a cyberattack on a “state-owned enterprise.” A source familiar with the document, which included a screenshot of an apparent ransom note, said that enterprise is CPC.

On Tuesday, Trend Micro, a multinational cybersecurity company, also alluded to the incident in an alert to customers. The advisory, which referred to the same ransomware samples, warned Trend Micro customers of ongoing ransomware threats to Taiwanese companies and told them to seek help if they saw attempts to break into their systems.

Taiwanese authorities have yet to name a culprit in the attack on CPC.

After its website was down for much of Tuesday, CPC Corp. struck a defiant tone when it was finally able to post its statement online, pledging to “introduce a more rigorous security detection system.”

The U.S. government has previously tried to bolster the cybersecurity defenses of Taiwan, which China considers its territory. In November, the American Institute in Taiwan, the de-facto U.S. embassy on the island, sponsored a drill that simulated attacks on Taiwanese public and private organizations.

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• Jail time for Maine child in 764 marks turning point in federal law enforcement

Technology

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

• The Collective Cyber Defense letter wrote your next vendor questionnaire

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure