Blastoize Reposts Partial Knownsec Document Leak With Claims of Cyber Tools and Global Targets
Summary
Blastoize reportedly reposted part of a November 2025 Knownsec document leak. The files allegedly include cross-platform RAT source code, hardware attack plans and records of overseas targeting; Chinese authorities deny the breach.
Key points
- Blastoize reportedly reposted a partial download of documents from an alleged November 2025 Knownsec breach.
- The documents reportedly include source code for RATs targeting Windows, Linux, macOS, iOS and Android.
- One document is said to describe a malicious power bank designed to exfiltrate data.
- Spreadsheets reportedly list more than 80 overseas targets across over 20 countries.
- The files are said to indicate foreign government and telecom data collection and collaboration with Chinese government units; Chinese authorities deny the breach.
Article Details
- Victim Organization
- Knownsec
- Incident Type
- Reported breach and leak of corporate documents
- Data Types Exposed
- Corporate documents
- RAT source code
- Hardware attack specifications
- Target lists
- Government and telecommunications data
- Affected Records
- More than 12,000 files reportedly exposed
- Claim Status
- alleged
Threat Actors
Countries
IndiaThe cache includes RAT source code for multiple platforms, malicious hardware specifications, and evidence of large-scale data exfiltration affecting India, South Korea, and Taiwan.South KoreaThe cache includes RAT source code for multiple platforms, malicious hardware specifications, and evidence of large-scale data exfiltration affecting India, South Korea, and Taiwan.TaiwanThe cache includes RAT source code for multiple platforms, malicious hardware specifications, and evidence of large-scale data exfiltration affecting India, South Korea, and Taiwan.