Massive Data Leak Exposes Inner Workings of Beijing-Linked Hackers

https://icaro.icaromediagroup.com/system/images/photos/16073988/original/open-uri20240225-18-ldytti?1708876206
ICARO Media Group
Politics
25/02/2024 15h42

A recent data breach from Chinese cybersecurity firm I-Soon has revealed detailed insights into the activities of Beijing-linked hackers. The leaked information provides a rare look into the day-to-day operations of China's extensive hacking program, which the FBI considers the largest of its kind globally.

The leaked data, which has been removed from the online platform GitHub, offers a wealth of information on I-Soon's efforts to target government entities in neighboring countries like Kyrgyzstan, Thailand, Cambodia, Mongolia, and Vietnam. Moreover, the leaked chats showcased the firm's claims of accessing telecom service providers in countries such as Pakistan, Kazakhstan, and Malaysia, among others.

The leak also shed light on I-Soon's targets within China, ranging from regions like Xinjiang and Tibet to issues like illegal pornography and gambling rings. Most of the firm's clients reportedly comprised provincial or local police departments, as well as state security agencies responsible for protecting the ruling Communist party from perceived threats.

The leaked communications also revealed discussions of official corruption within the company, with salesmen reportedly planning kickbacks to individuals involved in selling I-Soon's products to police departments. Moreover, references to a client in Xinjiang raised concerns due to the region's documented human rights abuses, with complaints from employees about the challenges of operating in the area.

Additionally, the leaked data detailed I-Soon's development of malicious software, such as trojan horses, designed to access private data. The firm also offered services to breach smartphone operating systems, including an innovative power bank capable of extracting data from devices. Furthermore, discussions within the leaked communications highlighted claims of being able to access and monitor individuals' computers remotely, engage in key logging, and bypass two-step authentication methods.

Amidst the revelations, the leaked chats also illustrated grievances among I-Soon employees about office politics, lack of technical expertise, inadequate remuneration, and management issues. Screenshots of discussions between employees and supervisors over salaries, as well as complaints about a lack of pay raises despite luxury purchases by company executives, painted a less-than-flattering picture of the everyday operations at the mid-level Chinese cybersecurity firm.

The scope of the leaked data provides unprecedented visibility into the activities of Beijing-linked hackers and raises significant concerns about cybersecurity practices and potential international implications.

Date: Not mentioned.

The views expressed in this article do not reflect the opinion of ICARO, or any of its affiliates.

Related