Chimera APT Threat Report on Semiconductor Industry

This technical report analyzes advanced persistent threat (APT) attacks targeting the semiconductor industry over the past two years, with a focus on incidents affecting Taiwan's semiconductor sector. The report outlines the concentration of these attacks and their potential impact on the global supply chain, emphasizing the critical role of Taiwan in semiconductor manufacturing. It details the operational tactics of the Chimera APT Group, which has been linked to multiple cyberattacks aimed at stealing sensitive information related to integrated circuits and software development. The report describes specific malware used in these attacks, including SkeletonKeyInjector and Cobalt Strike, and highlights the challenges faced by semiconductor vendors in enhancing their cybersecurity measures. Additionally, it presents case studies of two semiconductor companies affected by these attacks, illustrating the methods employed by the attackers and the responses initiated by the victims. The findings aim to provide insights into the evolving threat landscape and assist companies in fortifying their defenses against similar future threats.