Taiwan is no stranger to nation state threats attacks, with numerous high-profile cases making headlines in recent years. In this presentation, we will delve into the tactics and techniques used by nation-state Activity Groups targeting Taiwan, with a focus on the lessons learned from similar attacks in Ukraine. We will examine how attackers leverage legitimate software to gain additional privileges, utilize LolBin techniques to escalate their access, and maintain a persistent presence in target systems.Additionally, we will discuss the importance of organizations being proactive in their cybersecurity efforts and implementing appropriate defenses to prevent such abuse. Through this presentation, attendees will gain valuable insights into the tactics and techniques used by nation state actors and how to protect their organizations from these threats. By understanding the similarities, victimology and differences between attacks in Ukraine and Taiwan, attendees will be better equipped to recognize and respond to potential threats in their own environments.

Learning objectives:

• Understand the tactics and techniques used by APTs targeting Taiwan
• Learn how to identify and prevent the abuse of legitimate software by attackers
• Learn about LolBin techniques and how to defend against them
• Understand the importance of being proactive in cybersecurity efforts and implementing appropriate defenses to prevent nation state attacks