Taiwanese associated with Chinese group behind cyberattacks arrested

Two alleged Taiwanese clients of a Chinese ransomware group have been arrested and released on bail, according to the Ministry of Justice Investigation Bureau. Between February and March, the group CrazyHunter used ransomware to attack hospitals, publicly listed companies, and academic institutions, with Victims who refused to pay ransoms informing the bureau’s Taipei field office.

Investigators said the targets included Mackay Memorial Hospital, Changhua Christian Hospital, and the listed firm Keding Enterprises, with at least four organisations filing complaints. Analysis of IP addresses and ransomware samples led to the discovery that CrazyHunter sold stolen information to data trafficking groups in China and Taiwan, according to CNA. The report notes that two Taiwanese clients were linked to these activities and were arrested and released on bail as part of the police inquiry.