Analysis of i-Soon leaks by German domestic intelligence services

This report offers a comprehensive overview of i-Soon’s cyber espionage activities, highlighting the industrialization of such operations and their alignment with China’s strategic objectives. The documents surfaced on GitHub in February 2024, and SentinelLabs’ early analysis found marketing material, thousands of WeChat messages and target lists with the fee paid for each hack. The overview provides links to the four different parts of the analysis. Part one provides an overview of the organization and methods. The second report put the group into context with the security apparatus. The third report touches on the general targets of i-Soon. The fourth part provides a short overview of the tools and customers.