Attributing I-SOON: Private Contractor Linked to Multiple Chinese State-sponsored Groups

Insikt Group analyzed an anonymous February 18, 2024 leak of i-SOON materials that expose links between the Chinese contractor and state-sponsored espionage groups (RedAlpha, RedHotel, POISON CARP), revealing coordinated cyber-espionage activity including theft of telecommunications data, the role of private digital quartermasters, and continued infrastructure developments tied to those groups.