Interesting report involving NXP, one of the Top-10 IDMs...

Interesting report involving NXP, one of the Top-10 IDMs targeted by Weebit:

https://www.eenewseurope.com/en/reports-nxp-was-hacked-by-china-for-years/
Reports: NXP was hacked by China for years

A Chinese hacker group known as Chimera stole intellectual property from the internal computer networks of NXP Semiconductors NV (Eindhoven, The Netherlands) from late 2017 to early 2020, according to the Dutch newspaper NRC.

During this period the hackers made repeated thefts of intellectual property including chip designs, the report said. NXP has confirmed there was a security breach in 2019 without providing details.
Security IP and secure chips are one of the things that NXP provides to the market. The company offers chips and IP for ePassports, electronic ID credentials, transportation and payment cards and RFID solutions. It is reportedly a supplier of secure elements used in the Apple Pay feature of the iPhone.
Recent reports relate that hackers used NXP employees’ accounts to log-in. This data had been obtained from previous breaches of Facebook and Linkedin and the hackers then used brute force to guess passwords. Once inside the network the hackers gradually expanded access rights until they came across data of interest which they would encrypt and then export via cloud storage systems such as Microsoft OneDrive and Google Dropbox. To help avoid detection the Chimera hackers were cautious and only checked for new data to steal every few weeks, according to reports.

Transavia

The security breach came to light when Transavia, a subsidiary company of the airline KLM, noticed it was being hacked by Chimera late in 2019. Investigations revealed links to IP addresses in Eindhoven and NXP was informed.
NXP acknowledged the security breach in its 2019 Annual Report although it was not widely reported at the time.
NXP has issued the following statement: “As stated in our 2019 Annual Report, we became aware of a compromise of certain IT systems, and after a thorough investigation we determined that this incident did not result in a material adverse effect on our business. At NXP, we take the security of data very seriously. We learned from this experience and prioritize continually strengthening our IT systems to protect against ever-evolving cybersecurity threats.”
At least seven Taiwanese chip companies have been hacked by the Chimera group, according to reports.