U.S. Indictments Shed Light On I-Soon Hacking Tools, Methods

U.S. DOJ indictments allege i‑Soon operated as a PRC-directed APT‑for‑hire from 2016–2023, using sophisticated phishing, account‑takeover, and password‑cracking platforms to breach email accounts, phones, servers, and websites of governments, defense agencies, media and other high‑value targets, selling both services and stolen data to Chinese state security bureaus.