KnownSec Data Leak Exposes State-Aligned Cyber Espionage Pipeline

A large leak of internal KnownSec documents reveals the company acting as a contractor for Chinese state intelligence, exposing a vertically integrated espionage ecosystem — including ZoomEye search sensors tied to a classified TargetDB of 24,000 organizations and 378M IPs, an exploitation framework (GhostX) for persistence and traffic manipulation, an email replication tool (Un-Mail), and a Passive Radar tool for silent internal network mapping — demonstrating high-sophistication capabilities for global reconnaissance and long-term surveillance.