Chinese Police Investigate Unauthorized Leak of Documents Revealing Hacking Activities and Surveillance Tools
In a shocking turn of events, Chinese police are currently investigating an unauthorized online dump of documents from a private security contractor that is connected to the country’s top policing agency and other government entities. This trove of documents exposes apparent hacking activities and surveillance tools used by the contractor, I-Soon, to spy on both Chinese citizens and foreigners. The leaked documents shed light on the methods employed by Chinese authorities to surveil dissidents abroad, conduct hacking operations against other nations, and promote pro-Beijing narratives on social media platforms.
The leaked documents reveal that I-Soon’s hacking tools have been used to target various regions, including Central and Southeast Asia, Hong Kong, Taiwan, and the heavily Muslim region of Xinjiang in China’s far west. Of particular concern is the targeting of ethnicities and dissidents in areas that have experienced significant anti-government protests, such as Hong Kong and Xinjiang. The tools provided by I-Soon enable Chinese state agents to unmask users on social media platforms outside of China, break into email accounts, and conceal the online activities of overseas agents. Additionally, the leaked documents describe devices disguised as power strips and batteries that can compromise Wi-Fi networks.
The leak of these documents has prompted an investigation by both I-Soon and Chinese police to determine how the files were leaked. While the source of the leak remains unknown, it is speculated that it could be a rival intelligence service, a dissatisfied insider, or even a rival contractor. The leaked material indicates that I-Soon’s clients include governments, telecommunications firms abroad, and online gambling companies within China. The company’s website, which previously listed its clients and advertised advanced hacking capabilities, is now offline.
I-Soon, founded in Shanghai in 2010, has subsidiaries in three other cities, including Chengdu, where its hacking operations and research and development are based. Despite the leak, I-Soon’s Chengdu subsidiary continues to operate as usual. The office is adorned with posters featuring the Communist Party emblem and slogans emphasizing the importance of safeguarding state secrets. The leaked documents suggest that I-Soon’s tools are primarily used by Chinese police to control dissent on overseas social media platforms and flood them with pro-Beijing content. While Chinese authorities have the ability to surveil and censor domestic social media platforms, they lack the same control over overseas sites like Facebook and Twitter, which millions of Chinese users rely on to evade state surveillance.
The leaked documents also reveal I-Soon’s targeting of various countries and organizations. One contract draft shows that I-Soon marketed “anti-terror” technical support to Xinjiang police, claiming access to hacked data from countries such as Mongolia, Malaysia, Afghanistan, and Thailand. The documents indicate that I-Soon has targeted 14 governments, including India, Indonesia, and Nigeria. Notably, the company charged only $55,000 to hack Vietnam’s economy ministry. While there is no evidence of successful hacks against NATO countries, it is important to note that Chinese state-backed hackers continue to target the United States and its allies.
Cybersecurity experts who have analyzed the leaked documents believe that they are legitimate and align with what would be expected from a contractor working on behalf of China’s security apparatus. The leaked material has also drawn attention to the issue of Chinese state surveillance and harassment of government critics overseas. Western governments, including the United States, have taken steps to counter these activities in recent years. However, the leaked documents serve as a reminder of the looming threat posed by Chinese state hacking and surveillance, which instills fear and leads to self-censorship among Chinese and foreign citizens abroad.
As the investigation into the leak continues, it remains to be seen how this incident will impact I-Soon and its ties to the Chinese government. The unauthorized release of these documents has undoubtedly raised concerns about the extent of Chinese state hacking and surveillance activities, as well as the potential implications for cybersecurity and international relations.
