ZRON: An Espionage Suite, Allegedly

A threat actor is claiming a 7GB leak from Zhengzhou Zhirong Network Technology (ZRON), a purported Chinese digital-espionage shop, complete with malware samples, operational docs, and remote-management consoles for Windows and Android. NetAskari’s paywalled analysis reportedly goes further, describing cross-platform implants (Windows, macOS, iOS, Android, Linux), credential harvesting, and email interception, alongside recovered diplomatic emails naming targets from South Africa and Russia to Panama, Kyrgyzstan, the Philippines, Afghanistan, and the Vatican. The seller (going by “penguinbrew” and “ZRONLEAKS,” and PGP-signing messages for credibility) has hawked Chinese-tech-company databases before, though both write-ups caveat that the full dataset’s authenticity is not yet verified. If genuine, ZRON joins a growing genre of Chinese contractor leaks, after the Knownsec dump that DomainTools analysed in January and the i-SOON files before it.