New Leak Shows Business Side of China’s APT Menace

**Executive summary:** A leak of over 500 internal documents from Shanghai-based cybersecurity firm i-SOON reveals the company conducted APT-style cyberespionage for Chinese government clients, documenting intrusions into UK and multiple Asian government networks, contractor relationships (including links referenced to Poison Carp and connections to Chengdu 404/APT41), and internal communications showing targeting lists, operational details, recruitment efforts, and low employee morale; security researchers view the leak as rare visibility into China’s mercenary-like cyber espionage ecosystem.