Blog on Chinese cyber operations, online surveillance, always on the hunt for leaked documents : https://xitter.cf/t.co/VL2r9IVMh2 | https://xitter.cf/t.co/eVXinXmzYd
World
Joined February 2025
- Tweets2K
- Following153
- Followers13K
- Likes1.4K
Pinned Tweet
Just as Trump and Xi might be shaking hands today we are delivering deep dive into more data from the company 'ZRON'.
A digital Espionage-as-a-service shop, that hacked US embassy emails, runs big-data analysis operations on national and foreign targets for China's security services. There is a lot of ground to cover, so stay with us and let's go. 1/13
We are going to have a couple of big stories coming up on China's use of Big Data and AI systems to keep an eye on its own population but also elements abroad.
If you think that the surveillance-state stops at China's borders, you are gravely mistaken.
What once was a practical limitation, only punctuated via dedicated espionage actions in specific cases, has now grown into a full-fledged global drag net. So, stay tuned...
NetAskari retweeted
No defender caught this Russian-speaking operator. They went after #Ukraine’s state data-exchange system, and the working directory sat open for 17 hours... That is where everything was: the access log that proves execution, the scan output, the full target list
The Hunt.io research team rebuilt the whole campaign from it: a solo operator going after a state data-exchange system with a borrowed Log4Shell chain, and we only know its shape because they left the door open!
Here is how we did it 👇
hunt.io/blog/ukraine-state-d…
ARTEX seems to be quite popular lately again: bloomberg.com/news/articles/…
NetAskari retweeted
Today we're sharing a break down of Discover-Tech's aggregated ad bids!
Today we're publishing some additional details from Discover-Tech, aggregated ad bids and which institutions were discovered in a limited bid dataset recovered from the Druid instance covered by @citizenlab - threatnotify.org/projects/dt…
Good report by @Ivanklydz on a Chinese actor's facilitating AI supported operations to go after government targets across Asia 'The platform ran 116 unique worker containers and logged roughly 230,000 dispatcher events over twelve days, consuming an estimated 36.7 billion LLM tokens through a single gateway key' : vulone.com/blog/a-china-link…
NetAskari retweeted
We hacked the hackers infrastructure because they left their AI tool expose /tmp for exploit delivery.
Read how: China-Linked Hackers Targeted Governments Across Asia
vulone.com/blog/a-china-link…
During routine threat actor infrastructure hunting I identified a suspicious APAC-hosted VPS running an autonomous AI intrusion platform with its entire working directory exposed to the open internet on port 9000. No authentication. 150+ live campaign files sitting there.
I published my initial findings. @vulonehq then took it further.
@vulonehq obtained authorized access to the server, pulled 16.4 GB of evidence including recovered deleted container layers, and mapped the full scope of the campaign.
Read Here: vulone.com/blog/a-china-link…
#china #vietnam #indonesia #india #cybersecurity #intrusion
NetAskari retweeted
Threat actors vibe-coding their C2s like it's "yet another web app" opens a whole new world of possibilities 🙃
A recent internal report by the company 北京华崮科技有限公司 (Beijing Huagu Technology) about the Chinese IT investment landscape lays bare its chaotic and unstructured nature. Spiraling costs, lack of standardization of project-spending-estimation and quickly changing requirements are a real challenge for many medium size companies. Resulting in a high turnover in the industry. 1/2
Read up our quick analysis of the internal report that shows how tough the investment landscape in China is for IT projects and how restructuring and streamlining of the process is urgently needed 2/2 : netaskari.substack.com/p/chi…
NetAskari retweeted
🚨NEW INVESTIGATION: University of Belgrade Rector who resisted crackdown on students was hacked with zero-click Pegasus.
Authorities raided his offices in March.
Serbia's snap elections are 6 days away.
There are more targets 1/
With @ShareConference citizenlab.ca/research/pegas…
NetAskari retweeted
🚨 An unpatched Broadcom Wi-Fi flaw lets attackers within radio range execute code as ROOT on affected routers, without a Wi-Fi password or pairing.
Researcher demonstrated password extraction and a remote shell. Potentially impacting millions of routers.
Read - thehackernews.com/2026/10/un…
Our deaddrop is now also available via the netaskari.com domain. Come by and drop some interesting stuff for us...
NetAskari retweeted
Here's how exactly Telegram provides user data to U.S. authorities. A letter recently filed in court shows how Telegram transfers that data, such as IP address and phone number.
More: 404media.co/heres-what-teleg…
Seems like we have a massive home-router vulnerability that can be exploited: "The vulnerability can be triggered remotely over WiFi without knowledge of the network key or completion of a normal WPS enrollment. Exploitation provides controlled information disclosure and arbitrary code execution." quentinkaiser.be/security/20…
NetAskari retweeted
Australia: Alleged Chinese spy posed as recruiter for 'retired Australian police'
abc.net.au/news/2026-10-16/c…
