LockBit Ransomware Gang Targets Taiwan’s Foxsemicon in High-Profile Cyberattack
Taiwan’s Foxsemicon Integrated Technology Inc. (FITI), a major semiconductor manufacturer, was hit by a cyberattack allegedly carried out by the LockBit ransomware gang. The hackers defaced the company’s website with a ransom note, threatening to leak stolen customer data on the darknet if demands were not met. The message warned that competitors could purchase the data if Foxsemicon delayed payment, claiming to have exfiltrated five terabytes of sensitive information.
The attack deviated from LockBit’s typical tactics, which usually involve listing victims on their extortion site rather than directly defacing corporate websites. Foxsemicon reported restoring its site shortly after detecting the breach and stated that the incident was unlikely to significantly disrupt operations. However, as of Wednesday afternoon (U.S. Eastern Time), the company’s website remained inaccessible, and Google search results still displayed the hackers’ message. Foxsemicon’s stock price dropped by approximately 3% on Taiwan’s market following the disclosure.
The company has not confirmed whether customer or employee data was compromised, nor has it disclosed the ransom amount demanded. Foxsemicon’s parent company, Hon Hai Technology Group, has not commented on the attack.
The incident occurs amid a surge in cyberattacks targeting Taiwan, particularly during its recent presidential election. Google Cloud reported a 3,370% increase in distributed denial-of-service (DDoS) attacks against the region compared to the previous year, with experts attributing the rise to heightened geopolitical tensions, particularly with China. However, LockBit is not believed to be politically motivated, suggesting financial gain was the primary driver in this case.
Source: https://therecord.media/foxsemicon-ransomware-attack-taiwan
Foxsemicon Technology LLC cybersecurity rating report: https://www.rankiteo.com/company/foxsemicon-technology-llc
"id": "FOX1770473554",
"linkid": "foxsemicon-technology-llc",
"type": "Ransomware",
"date": "1/2024",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'industry': 'Technology/Semiconductor',
'location': 'Taiwan',
'name': 'Foxsemicon Integrated Technology Inc. (FITI)',
'type': 'Semiconductor manufacturer'}],
'attack_vector': 'Website defacement, Data exfiltration',
'data_breach': {'data_exfiltration': 'Yes',
'sensitivity_of_data': 'Sensitive',
'type_of_data_compromised': 'Customer data'},
'description': 'Taiwan’s Foxsemicon Integrated Technology Inc. (FITI), a '
'major semiconductor manufacturer, was hit by a cyberattack '
'allegedly carried out by the LockBit ransomware gang. The '
'hackers defaced the company’s website with a ransom note, '
'threatening to leak stolen customer data on the darknet if '
'demands were not met. The message warned that competitors '
'could purchase the data if Foxsemicon delayed payment, '
'claiming to have exfiltrated five terabytes of sensitive '
'information.',
'impact': {'brand_reputation_impact': 'Stock price dropped by approximately '
'3%',
'data_compromised': '5 terabytes of sensitive information',
'operational_impact': 'Unlikely to significantly disrupt '
'operations',
'systems_affected': 'Company website'},
'initial_access_broker': {'data_sold_on_dark_web': 'Threatened to sell data '
'on darknet'},
'motivation': 'Financial gain',
'ransomware': {'data_exfiltration': 'Yes', 'ransomware_strain': 'LockBit'},
'references': [{'source': 'Cyber incident report'}],
'response': {'containment_measures': 'Website restoration'},
'threat_actor': 'LockBit ransomware gang',
'title': 'LockBit Ransomware Gang Targets Taiwan’s Foxsemicon in High-Profile '
'Cyberattack',
'type': 'Ransomware'}