The leaked documents provide insight into how Beijing outsources its infosec offensives. However, early analysis suggests that I-Soon's capabilities are not unique among Chinese attackers. The fact that China has a similar ecosystem of contractors with cyber capabilities is not surprising, as such contractors are common worldwide. Further revelations are expected as more of the documents are translated.
Key takeaways:
- A Chinese infosec vendor named I-Soon is revealed to offer rent-a-hacker services for Beijing, according to documents leaked on GitHub.
- I-Soon claims to have developed tools capable of compromising devices running Linux, Windows, macOS, iOS, and Android, and to have accessed systems of various government departments across Asia and NATO.
- The leaked documents also suggest that I-Soon has been bidding for work in Xinjiang, a province known for Beijing's persecution of the Muslim Uyghur population.
- The leak is significant as it provides insight into how Beijing outsources its infosec offensives, but early analysis suggests I-Soon's capabilities are not unique among Chinese attackers.