Taiwan cybersecurity alert: AI-generated content used in Lunar New Year social engineering scams
Taiwan's cybersecurity authority reported that during Lunar New Year 2026, attackers used AI-generated voice and video to impersonate acquaintances and conduct social engineering scams, with potential victims facing data leaks or financial losses. The Ministry of Digital Affairs issued public guidance on identifying and avoiding such attacks.
What happened
During Lunar New Year 2026, attackers used AI-generated content including realistic voice and video messages impersonating acquaintances to conduct social engineering scams in Taiwan.
Common attack vectors included fraudulent messages in messaging apps posing as New Year greetings with links to malicious websites, fake system notifications requesting account credentials, deepfake audio or video messages from supposed friends, spoofed government accounts on social media promoting fake time-limited offers or government subsidies, and phishing emails containing compressed files or image files with malicious code.
Reported impact
The Taiwan Cybersecurity Bureau warned that victims could suffer personal data leaks or financial losses if they clicked malicious links or entered account credentials as directed by scammers.
Governance controls
The Ministry of Digital Affairs Cybersecurity Bureau published guidance recommending three steps to identify social engineering attacks: 'stop' and stay calm before clicking links, 'look' carefully at sender identity and file names while watching for requests for sensitive data, and 'listen' by verifying through multiple sources.
The bureau reminded the public that government agencies never request passwords or financial information through text messages or social media, official government websites end in '.gov.tw', and government notifications use the '111 government exclusive SMS platform' showing '111' and recipient phone last three digits with sender agency name.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.