Chinese police are currently investigating a massive data leak which originated from a private security contractor with alleged links to Chinese state security. The data, which made its way from the contractor called I-Soon to an upload on code repository Github.com, offers an unprecedented insight into the workings of an international cybersecurity operation.
This is not the first time GitHub has been the source of cybercriminal activity. In January of this year, it was revealed that multiple bad actors were deploying malicious payloads inside of GitHub’s legitimate traffic by exploiting its file and code sharing capabilities. The cybercriminals were also able to redirect this traffic to phishing sites.
