NetAskari obtained an August 2019 confidentiality management system (保密管理系统) deployed by Chinese security agencies to prevent classified document leaks from government workstations. The software uses FileContentMonitor.exe to scan documents for confidentiality markers (密), template-based classification matching official document patterns, and granular policy enforcement to restrict printing, USB copying, and network sharing. It communicates with C2 servers via XMPP/TLS and includes remote capabilities for file deletion, upload/download, and screenshot collection, functioning as internal compliance surveillance rather than traditional endpoint protection. Because nothing says “trust your employees” like a government RAT on every workstation.
