The Knownsec leak exposed a Chinese‑based cybersecurity contractor operating as a key node in China’s offensive cyber‑espionage ecosystem, with internal documents and infrastructure data showing extensive foreign‑targeting datasets and operational links to the country’s security and military apparatus. DomainTools software helped analysts unpack this threat by providing domain‑centric context around the leaked infrastructure, including historical DNS records, WHOIS‑based attribution, and risk‑relevant signals tied to Knownsec‑linked assets. This enabled security teams to map Knownsec’s global targeting footprint, connect domains to specific campaigns, and identify potentially malicious or compromised infrastructure, thereby strengthening defenses against contractor‑driven espionage activit

Join for free to read