Unmasking I-Soon | The Leak That Revealed China’s Cyber Operations
ID: 5c7d264c-ce24-5238-956f-58635c57daa7
STIX ID: report--5c7d264c-ce24-5238-956f-58635c57daa7
Date Published: 2024-02-21
Date Updated: 2026-07-27
Author: Dakota Cary & Aleksandar Milenkoski
**Unmasking I-Soon**: Leaked internal documents from I‑Soon (a PRC-affiliated hacking contractor) reveal marketing materials, client targeting lists, employee chats, technical documentation for offensive tools (including custom hardware and malware/C2 details), and claimed compromises of governments, pro‑democracy groups, universities, and NATO; the trove offers rare visibility into China's contractor-driven cyber‑espionage ecosystem, complicates attribution, and highlights both operational tradecraft and risks to defenders.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
