FBI sanctions listing
AQUATIC PANDA CYBER THREAT ACTORS
AQUATIC PANDA CYBER THREAT ACTORS is an individual designated on the U.S. Federal Bureau of Investigation — Wanted (FBI) sanctions list under the Cyber's Most Wanted programme, listed on 2025-02-19. Cyber's Most Wanted. This page summarises the public designation — known aliases, identifying particulars, the stated reason for listing and linked parties — alongside an independent, transparent risk indicator.
Reason for listing
Conspiracy to Commit Computer Fraud; Conspiracy to Commit Wire Fraud From at least in or around 2016, through in or around 2023, the Chinese technology company Anxun (i-Soon) Information Technology Co., Ltd., aka “i-Soon” (“i-Soon”), and its personnel, allegedly engaged in numerous and widespread compromises of email accounts, cell phones, servers, and websites at the direction of, and in close coordination with, the People's Republic of China's (PRC) MSS and MPS. Incorporated in or around 2010, in Shanghai, China, i-Soon allegedly profited and grew as a key player in the PRC’s hacker-for-hire ecosystem. At certain times, i-Soon had three (3) teams of employees allegedly working to attack computer systems. i-Soon employees allegedly compromised and attempted to compromise victims across the globe, including a large religious organization in the United States, critics and dissidents of the PRC government, a state legislative body, United States government agencies, the ministries of foreign affairs of multiple governments in Asia, and news organizations.
Statement of reasons as published by US FBI. This is the issuing authority's wording, reproduced for reference.
Designation record
| List / authority | US FBI (FBI) — FBI — Cyber's Most Wanted |
|---|---|
| Entity type | Person |
| Programmes / regime | Cyber's Most Wanted |
| Date listed | 2025-02-19 |
| Source record ID | fbi:3a3225b6012f4da5b28ef07d6befa573 |
| Last updated (our copy) | 2026-06-04 |
Identity & particulars
| Position / role | Cyber's Most Wanted |
|---|
Deep-research dossier
Not yet deep-researched
The instant review above is drawn from the public lists. A deep-research dossier goes much further — an analyst-grade OSINT report: associate & co-investment network screening, structural / ownership opacity, a dated risk trajectory, an 8-factor scoring model, and numbered, source-linked evidence. See the format in the design system.
Clarifications & right of reply
Are you AQUATIC PANDA CYBER THREAT ACTORS, or an authorised representative?
You — or your counsel or agent — can file a clarification and supporting documents against this record. Filings are reviewed and verified before anything is published; submissions are never posted automatically.
File a clarification or document
Source & provenance
| Issuing authority | U.S. Federal Bureau of Investigation — Wanted |
|---|---|
| Source identifier | fbi:3a3225b6012f4da5b28ef07d6befa573 |
| Aggregated by | Sanctiometer (independent) — verify against the issuing authority's official list before acting. |