Natto Thoughts

Natto Thoughts

Home
Notes
Archive
Leaderboard
About
i-SOON: Another Company in the APT41 Network
A lawsuit casts light on the ecosystem of IT companies related to Chengdu 404, the company allegedly behind Chinese state-sponsored hacking group APT41.
 • 
Natto Team
2
Troll Humor
Tongue in cheek, divisive online personas pursue Russian disinformation goals
 • 
Natto Team
Flax Typhoon-Linked Company Integrity Technology: a Competitor, Business Partner and Client of i-SOON
First i-SOON, then Integrity Tech: How many more Chinese information security companies lie behind Chinese state cyber threat campaigns?
 • 
Natto Team
1
Salt Typhoon: the Other Shoe Has Dropped, but Consternation Continues
Sichuan Juxinhe, directly involved in the Salt Typhoon cyber operations, resembles a front company of the Chinese Ministry of State Security
 • 
Natto Team
The Red Dragon Searches for Pearls Through Quantum Tunneling – But You’ve Got the Wrong Paper
A September paper, soon hushed up, shows Chinese researchers may have discovered a class of quantum-annealing algorithm capable of attacking…
 • 
Natto Team
3
Defense-Through-Offense Mindset: From a Taiwanese Hacker to the Engine of China’s Cybersecurity Industry
The belief that offense enables defense in cyberspace, first rooted in China’s 1990s hacker culture, has since permeated the country’s cyber ecosystem
 • 
Eugenio Benincasa
2
Matrix Cup: Cultivating Top Hacking Talent, Keeping Close Hold on Results
Matrix Cup aligns with China’s strategy to enhance its offensive and defensive cyber capabilities by increasing the volume of vulnerabilities available…
 • 
Eugenio Benincasa
 and 
Natto Team
Zhou Shuai: A Hacker’s Road to APT27
US-sanctioned, allegedly APT27-associated actor Zhou Shuai represents a group of Chinese elite hackers who have become an important resource for Chinese…
 • 
Natto Team
Front Company or Real Business in China’s Cyber Operations
Distinguishing whether entities are front companies or real businesses can help us understand the strategy, scalability, and persistency of Chinese…
 • 
Natto Team
1
The Pangu Team—iOS Jailbreak and Vulnerability Research Giant: A Member of i-SOON’s Exploit-Sharing Network
A year after the i-SOON leaks, a deep dive into the Pangu Team reveals new insight into the relationships between elite vulnerability researchers and…
 • 
Eugenio Benincasa
2
Sichuan Silence Information Technology: Great Sounds are Often Inaudible
Formerly very public, Sichuan Silence has gone quiet since 2020; but as part of a circle of Chengdu-based jack-of-all-trades infosec companies, it…
 • 
Natto Team
Reconnaissance Scanning Tools Used by Chinese Threat Actors and Those Available in Open Source
China has its own ecosystem of scanning tools, whether for good or ill.
 • 
Natto Team
© 2025 Natto Thoughts
Privacy ∙ Terms ∙ Collection notice
Start writingGet the app
Substack is the home for great culture