IoC lists by Dancho Danchev https://ddanchev.blogspot.com/2024/02/profiling-chinas-i-soon-information.html === hxxp://t[.]wss[.]ink/f/8iykyg9b6st - Email: 2592858885@qq[.]com; 4826193@qq[.]com - hxxp://www[.]wenshushu[.]cn/f/8iykyg9b6st - 111[.]231[.]213[.]199 hxxp://t[.]wss[.]ink/f/8kmzl1edc19 hxxp://t[.]wss[.]ink/f/8abv0if4m5p hxxp://t[.]wss[.]ink/f/8iykyg9b6st 42[.]177[.]83[.]82 113[.]207[.]69[.]126 113[.]59[.]43[.]73 211[.]93[.]211[.]192 hxxp://wss[.]show hxxp://wss[.]ink hxxp://wss[.]zone hxxp://wss[.]email hxxp://wss[.]pet hxxp://i-soon[.]net - 123[.]56[.]229[.]155; 112[.]126[.]82[.]38 === Sample users involved in these campaigns include: r3kapig 天枢Dubhe Nepnep ADVambystoma EDISEC V&N CNSS justCatTheFish Radboud Institute of Pwning ⚔️TSJ⚔️ Arr3stY0u NaN polaris Nu1L 0RAYS VTeam N3w55 Admin /mnt/ain 0ops waterdrop Need eXplore eXecute and eXploit SOter14 天权megrez purf3ct Vidar-Team KCSC TAT Aurora CyberSlacker Volcano VnC Sarmat /bad 招联中英街 A1natas ECSC Team France SU 风信子 BinX n03tAck Phish2Own 0xFA Scr1w spookies Mukyu~ Subuthax xunlan ukry Tower of Hanoi _W&M_ 0x401 nnnnnn d4rkn19ht f1rs7_7im3 Dest0g3 HDFR xdlddw Venom 葱花泡面 r00t 土风 Kap0k Vindicator return catbui; EchoSec flag{}___Orz ECSCTeamGreece ARESx ECSC Slovak Cyber Team PearlSky ECSCTeamEstonia m1dm4n LSP EnKai L WHT altair IllIllIIllIIlII always noobteam TeamRocketIst -_- Shell01_Team TimelineSec arancinHaCK Suyun114 D1no 人菜瘾大 Xp0int vvu bad_cat leizee jitshit Sloth viol1t d00m NEUX NYSEC gsgx Yellow Panda SiBears flag不太队奇怪龙 d4rkc0de sleeper m3ow Diligenza UzUzuga ONO M4rshall Sitting Ducks S0FTS3C EvilBunnyWrote Tide A[.]H[.]M[.]4 solobolo JonPwnJones hhhhhh S&F bisqet Azure Assassin Alliance Brunnerne IQ-toppene Delusions of Grandeur Delogrander 糖炒栗子队 Ujang_No_Limit thehackerscrew US[.]m0n4d i'm down QQ th3_5had0w sweeeets[.]conf 4learne Sakana tello619 AmTrain Flyteam R4iny13lueB311 ShinyColors JDI 为了综测什么都队 WMCTF_rxm fxxk questioner single_seal Luoxioheizhanji 北理工的饿龙不会CTF惨惨 helloWorld FAQ m1rr0r breakthrough NIS BitWarriors explo1t alpha 0xFE tmttmt GET XingXing rwebOrz c18c AGCTF Mr[.] Trumpiter momomo xcustar flaggycat iptls Co1l_8ct_LigHt 混混混 NISA cyfctf BeiluoSect We're Frenemies Newcomer_PLZ Ze3boola AW Blue th3_bl1nd3r DDDD_orz wlove-team mammoth guess ACT M1O R3dC0re GW11 Ireland without the RE FPTU EThical Hackers 0xC5C-NYIT D0V CrypticC 鹰盾 Aspirant atkmt 泥电蒟蒻入门求带捏 K8X7Q8PWYWDW6XKH1 bobo koplop sscc 0xcoo1 b3f0re tsia whoami01 mouseman SAINTSEC 0xD1SN3YL4ND Uranus 610 acquireBag 4Ks1Gn or4nge Bomba MSEC_Rev3nge MSEC ADC Ge91an JK-branch lousix MSEC_Try_H4rd 23楼来签到 0xdecafbad ns4style ONC_Team TCP1P skills WJSb ECSC CAN Nb_orz TheFulaniGovernment HacktBack supersquad nini Byte Goblins AEeo suibianlaiwanwan nihaohello OneOne RR 香香嘴炒饭 TorchWood MoTeam whoami 你有想法吗 CyberSquad berTrAM-WatchDog N0FR13NDS BreakYourLimit P3QU1 Em0t3t bh b_p TheRoundTable Have breakfast?? lonelydance A[.]k[.]a[.]t[.]s[.]u[.]k[.]i z0n3 Baka_Crypto Ilovetehpeng ctfxiaobai 汪汪队坐大牢 see the world LVM Spirit 吃颗大力果 Cut3 Guys SourceCode Matrix BlackLight LEVEL Do_I_Know_You? 0x0 0XGIT oniichan zhu-shu sudocide boom cyber_panda mayf1y Cyb3rTh1eveZ CanCan 0xE4s0n q1uf3ng _r4nd0m_ NEUQRO qds yyds2022 poum 1!5!^^ Earl3ssC4t e1even IndiaCTF TeamShakti Never ggggglacier Z3r01 Invaders 魔法少女天团 Hcl4y jff HNN4ABO rnerd BC Gangz VexillumHunters Team NEXIX LS misc moon _j0k3r_ Wani Hackase NMOSS Mousers flagdode Ubuntu_Turbo_Turtle Bebas mang 猫猫逛逛吃吃吃 D34nhK13n n0n Th3ee TeamGipsy KleinJ Bits & Pieces CyberWolves 干煸豆角 Poker klandestin liudehua istudy hvvgoodluckrt uetctf onlywxz lU@H zodiac AnonSec M1nk Team Sp1d3rV3r5e XL Imitate Serika ConsultBoB CURS