Residents of Taiwan accused in cyberattacks

National security authorities are investigating three people with military backgrounds from Taiwan, accusing them of engaging in cyberattacks targeting the Chinese mainland, Hong Kong and Macao, according to a statement released Monday by the Ministry of State Security.

The ministry said it had uncovered a hacker group, "Anonymous64", that is supported by "Taiwan independence" forces. The group has allegedly carried out numerous cyberattacks aimed at gaining control of mainland websites, outdoor digital screens and internet TV systems to broadcast content that distorts the mainland's political system and policies.

Authorities have identified the suspects as Luo Junming, Hong Liqi and Liao Weilun, all of whom reportedly serve in Taiwan's information communications and electronic force command, the statement said.

The command, established in 2017 and restructured in 2022 under Taiwan's defense ministry, is primarily responsible for electronic, information and cyber warfare. The Ministry of State Security said it has been conducting cyber infiltration activities targeting key mainland sectors such as defense, aerospace and energy in a bid to steal sensitive data and disrupt mainland operations.

Anonymous64 is said to have launched cyberattacks in June last year following the registration of social media accounts under its name. The ministry said the group has since posted over 70 updates, boasting of its so-called "victories" in cyber warfare, which include targeting outdoor digital displays, vending machines, internet TV systems, and the websites of news outlets, airlines and universities.

However, the ministry noted that many of the "victories" were exaggerated or fabricated, with some attacks aimed at counterfeit or abandoned websites. In some cases, the group is said to have used image-manipulation software to inflate its claims.

The ministry urged the developers and operators of internet systems, along with internet users, to strengthen cybersecurity measures, regularly update their systems, remedy vulnerabilities and enhance monitoring to prevent future cyberattacks.

The investigation is ongoing.