Separatist cyberattack team exposed

China's Ministry of State Security on Monday revealed the identities of four senior members of the "Information, Communications and Electronic Force Command" of Taiwan, which serves as the main component of the island's "Taiwan independence "separatist forces tasked with carrying out cyber operations against the Chinese mainland.

ICEFCOM, which was established in June 2017 and was restructured in 2022 as a direct agency under the island's "defense department", has been hiring social hackers and cybersecurity companies as external forces to carry out cyber warfare directives issued by the Democratic Progressive Party authorities engaging in cyber espionage and sabotage activities against the mainland, the ministry said in a post on its official public WeChat account.

The ministry posted the pictures, dates of birth and ID numbers of four key members of ICEFCOM. It warned them that "Taiwan independence" separatist activities are a "path of no return", and urged them to abandon the illusion of "Taiwan independence "separatism and cease criminal cyber activities that divide the country.

The national security agencies will resolutely defend the country's sovereignty, security and development interests. All necessary punitive measures will be taken against the "Taiwan independence" separatist forces, and they will be held accountable for life in accordance with the law.

The ministry said common tactics used by ICEFCOM's cyberattack forces include infiltrating key information infrastructure such as the mainland's water, electricity, gas, heat, communication and camera networks. They have also targeted key units of the Communist Party of China, the central government, the military and enterprises by sending phishing emails and emails with content maligning national reunification.

In addition, the cyberattack forces have gained control of livestreaming platforms, electronic display screens, IP network intercom systems and portal websites by stealing login credentials. In those instances, they inserted videos and images promoting the anti-reunification agenda, the ministry said.

It added that the attackers have been lurking on social media platforms and operating a large number of "bot" accounts, which they use to spread false information to manipulate public opinions and create misunderstandings among residents of the Chinese mainland and Taiwan. They also use the accounts to monitor and suppress dissenters on the island.

Since 2023, under the guise of organizations including "Anonymous 64", they have been spreading false information on social media platforms, actively promoting the DPP authorities' separatist agenda.

But with the extensive use of open-source tools, such attacks can be easily discovered by national security forces. Recently, the national security agencies have traced and seized dozens of cyberattack platforms used by ICEFCOM, foiling their operations and attempts to steal secrets from key sectors on the mainland, the ministry said.

It also reminded internet service providers, operators and users to implement cybersecurity measures, update and upgrade their systems in a timely manner, close technical loopholes, enhance password strength and boost inspections to prevent cyberattacks from "Taiwan independence" separatists.

The Taiwan Affairs Office of the State Council also condemned Taiwan's cyber forces for continuing efforts to undermine the Chinese mainland's security. Chen Binhua, spokesperson for the office, accused Taiwan's cyber troops of persisting in their actions under the direction of the DPP.

"The unification of Taiwan with the mainland is an irreversible historical trend, while 'Taiwan independence' is a dangerous and misguided path," Chen said.