Telecom sector has been long as a major target of various cyber-attacks because of its position as an information flow center. As one of the world’s leading tech hubs, Taiwan’s telecom sector is especially facing a growing number of challenges, from cyberattacks and evolving regulatory pressures to the complex landscape shaped by global geopolitics. In today’s session, we will start by exploring the threat landscape of Taiwanese telecom sector. It includes a strategic overview of telecom industry, motivations to attract threat actors, technical dissect and corresponding attack vectors. We will provide real-world case studies of state sponsored attacks that showcase the implications of the ongoing threats. A significant part of our discussion will focus on the emerging concept of the ORB (Operation Relab Box) network, a botnet structure network composed of various compromised devices. ORB Network has been widely adopted by various state sponsored threat actors and can effectively hinder traceback by investigators. We will introduce the concept, mechanism, and use cases in various phases of cyber-attacks, to help audience master such kind of novel threats. By the end of our session, we hope to provide audiences with a clearer understanding of the current threats and the counter measure: a proactive cyber defense drive by cyber threat intelligence.