入侵真相
Turns out the Ghost was the PLA Dear Diary… In our last article, we examined a product sold by Guangdong Chanming called Security Tunnel Network. Turns out, this little project started as a solo venture called Free Connect by a certain boywhp, who just happens to be the co-founder of Guangdong Chanming, Wang Huiping. This Continue reading Turns out the Ghost was the PLA
Dear Diary, Today I found a Ghost in the Network A hidden seller Guangdong Chanming. If you were looking for them, you’d be disappointed. No public website, no storefront, and certainly no obvious product line to speak of. It made us wonder what their marketing team spends their days doing – if they even have Continue reading Dear Diary, Today I found a Ghost in the Network
The I-Soon Information Technology Co. Ltd. (aka Shanghai Anxun Information Technology Co. Ltd, or Anxun) on the face of it were known be a reputable company but they were hiding a dark secret. Under their mask they were being led by the CCP. As you are probably already aware, the company was the subject of Continue reading Is the CCP the biggest APT?
Article 1 left some tantalizing breadcrumbs about the manager of our main character organization from this article series, Wuhan Xiaoruizhi. ‘What is he up to?’ We hear you cry. ‘And what is up with all the lasers?’ So, without further ado. Introducing: Deng Zhiyong. Deng at surface glance is the manager and CEO of Wuhan Continue reading One man and his lasers
Welcome back Intrusion Truth readers, it’s been a little while. We hope you’ve spent the time reflecting on our findings from our previous set of articles on suspicious happenings in and around Wuhan. We don’t know about you, but even after six articles we felt we had some unfinished business with Wuhan Xiaoruizhi and friends. Continue reading Wuhan Xiaoruizhi Class of ‘19
We haven’t quite finished with Mr. Cheng yet. We have one final document to share from Cheng’s cloud. A photo of a handwritten note, a series of names, and differing currency values. Now, we can’t make out the name in the top left, but we are pretty sure that this is a cast list of Continue reading MiSSing links
You might be wondering why we have picked on Cheng Feng. Just a hard-working cyber security professional, right? Well, wrong, as it turns out. Cheng Feng helped us deduce what APT Wuhan Xiaoruizhi is a cover for. As regular readers will know, Intrusion Truth is nothing without its global network of supporters. We had to Continue reading Introducing Cheng Feng
Our last article left you on a cliff edge. What did we find on the dark web which proved so illuminating? Well, it would seem things at Wuhan Xiaoruizhi are not all well. In a post which was later redacted and then disappeared with the downfall of breachforums, we found a post from someone who Continue reading Trouble in Paradise
As our readers know from our investigation into Hainan Xiandun Technology Development Company, the Intrusion Truth team have become quite adept at spotting a fishy front company when we see one. Typically, these are ‘companies’ with a generic-sounding ‘technology’ name and a minimal online presence. They often post adverts on university websites looking for graduates Continue reading All roads…
Our last article introduced the mysterious graduates of Kerui Cracking Academy. As luck would have it, said mysterious graduates have left feedback, complete with graduate destinations and contact details on Kerui’s website. We won’t bore you by going through each individual piece of feedback – feel free to peruse at your leisure. Suffice it to Continue reading The Illustrious Graduates of Wuhan…