Lessons from the iSOON Leaks

The iSOON leak (~170MB) exposes internal documents from a Chinese MPS contractor describing commercial surveillance and offensive cyber products, operational slide decks, victim spreadsheets (governments, telecoms, hospitals, universities across many countries), and IOCs linking to known Chinese APT tooling and infrastructure; the materials reveal capabilities for mass email analysis, account takeover (Twitter 1-click exploits), telecom CDR/LBS access for real-time tracking, custom malware/RATs, and automated penetration platforms, indicating a sophisticated, large-scale state-aligned intelligence collection and offensive cyber capability with broad international impact.