Leaked TopSec tooling. A corruption scandal at the Shanghai State-owned Asset Supervision and Administration Commission. What more could you want from our latest @sentinelone.com blogpost? 👇 1/ - ThreadSky

About ThreadSky

dakotaindc.bsky.social • 2 days ago

Leaked TopSec tooling. A corruption scandal at the Shanghai State-owned Asset Supervision and Administration Commission. What more could you want from our latest @sentinelone.com blogpost? 👇
1/

Comments

dakotaindc.bsky.social•2 days ago

Alex Delamotte and Aleksander Milenkoski kindly brought me into to the fold on their tool analysis. I’ll leave it to them to dive into the particulars, as our report does so well. Suffice to say the military-contractor’s tooling includes a number of services and work records. 2/

dakotaindc.bsky.social•2 days ago

The full report is here 3/

https://www.sentinelone.com/labs/censorship-as-a-service-leak-reveals-public-private-collaboration-to-monitor-chinese-cyberspace/

dakotaindc.bsky.social•2 days ago

In the course of their analysis, the team found tooling that triggered alerts as sensitive web content was detected. These services are apparently sold to many hundreds of customers and monitor hundreds of thousands of websites according to TopSec annual report 4/

dakotaindc.bsky.social•2 days ago

Buried in the tooling were work logs, stating the task completed and the amount of work it took to complete. 5/

dakotaindc.bsky.social•2 days ago

One of those work logs, preceded by some code included reference to sending “validated events” to Zhao Nannan (赵楠楠）from the morning of September 14th 2023 🤔 6/

dakotaindc.bsky.social•2 days ago

We were able to identify the likely recipient working first for the MPS 3rd Bureau in Shanghai and a CCP member 7/

Posting Rules

Be respectful to others
No spam or self-promotion
Stay on topic
Follow Bluesky's terms of service

Comments

Posting Rules

Reply