GENERAL__2020__TLP-White_20200415_Chimera_V4.1.pdf

Chimera APT targeted Taiwan's semiconductor vendors during 2018–2019, using SkeletonKeyInjector and Cobalt Strike to gain persistence, perform lateral movement, and exfiltrate intellectual property (IC designs, SDKs) while evading detection through techniques such as process injection, scheduled tasks, and RC4-based credential manipulation; the report presents two representative cases, maps techniques to MITRE ATT&CK, and lists IoCs to aid defensive blue teams.