Threat Intelligence on Kemetmüller

2025 Top 20 Chinese Cybersecurity Enterprises

Wed, 11 Feb 2026 22:43:03 +0100

Introduction
#

On December 29, 2025, the Internet Society of China (中国互联网协会, ISC — an industry association affiliated with MIIT) published the China Internet Enterprise Comprehensive Strength Index (2025). Buried in Appendix 3 of the 39-page report is the 2025 Top 20 Chinese Cybersecurity Enterprises (2025年中国网络安全前二十家企业) — the officially sanctioned, publicly celebrated face of Chinese cybersec.

Anatomy of the One Fox Toolkit

Wed, 11 Feb 2026 21:25:10 +0100

Introduction
#

When EclecticIQ analyzed a 2023 Cobalt Strike intrusion¹ at Taiwan’s Directorate General of Highways (MOTC), the most useful artifact wasn’t the malware. It was a filesystem path leaked in the C2 logs:

C:\Users\Test\Desktop\ONE-FOX集成工具箱_V1.0魔改版_by狐狸\gui_other\Cobalt_Strike_4.5\plugin\TaoWu\script\lazagne.exe

Threat Intelligence on Kemetmüller

2025 Top 20 Chinese Cybersecurity Enterprises

Introduction #

Anatomy of the One Fox Toolkit

Introduction #

Introduction
#

Introduction
#