China / knownsec.com / Cloud Network Security Company / CorpDocs 12k / 2025
https://www.gopher.security/news/knownsec-data-breach-reveals-chinas-cyber-espionage-tactics
The Knownsec leak is a pivotal incident of 2025 because it exposed the inner workings of a major state-linked Chinese cybersecurity firm, revealed espionage tools and global targets, internal documentation, and evidence of ongoing cyber operations targeting other countries.
The Chinese government and state media have officially denied and downplayed the Knownsec leak incident. When questioned, the Chinese Foreign Ministry spokesperson stated that they were unaware of any breach at Knownsec and reiterated that China "firmly opposes and combats all forms of cyberattacks." This approach is consistent with previous incidents involving alleged state-linked cyber operations, where Chinese authorities typically issue blanket denials or express unfamiliarity, while emphasizing their official stance against cyberattacks.
Resecurity acquired the complete data set and prepared an analysis to increase awareness within the cybersecurity community. The Knownsec data leak has exposed a trove of internal documents, offensive cyber tools, and evidence of global targeting by a Chinese cybersecurity firm with government ties. The breach is prompting international investigations and raising concerns about the scale and sophistication of Chinese cyber operations.
The leaked Knownsec tradecraft details tools used externally to monitor and breach targets like foreign governments, critical infrastructure, and private-sector enterprises, as well as internally to track Chinese companies and individuals for intelligence, control, and counterintelligence. Revealing these tools helps divert suspicion from entities acting for the Chinese government, complicate attribution, and fuels internal power struggles, all while maintaining plausible deniability
Sample Screenshot: https://ibb.co/album/5X11nM
Sample CorpDocs: https://anonfilesnew.com/s/43zM9zU8c4V