VenusTech and Salt Typhoon Breach Sheds Light on China’s Covert Cyber Mercenary Networks

The dark web forum DarkForums, which has been a site for data breaches and leaks since BreachForums was shut down in mid-April, was the scene of two major leaks in late May involving Chinese cybersecurity organizations: VenusTech, a well-known IT security vendor, and Salt Typhoon, a state-sponsored advanced persistent threat (APT) organization affiliated with the Ministry of State Security (MSS).

These leaks, posted by newly created accounts “IronTooth” and “ChinaBob,” offer a rare glimpse into the intricate web of China’s hack-for-hire industry and its deep ties to government operations.

While the sample data provided is smaller compared to previous leaks like those from TopSec and iSoon, the exposed information ranging from government contracts to compromised infrastructure reveals critical insights into the operational structure and targets of these entities.

VenusTech Leak Exposes Government Contracts

The VenusTech leak, posted on May 17 by “IronTooth,” includes nonpublic documents, spreadsheets, and contracts that ...