INTEL_REPORT
arXiv — Cryptography & Security (cs.CR) · published 6/18/2026, 4:00:00 AM · TLP amber
Summary
Ingested excerpt (first ~500 chars of normalized text).
Understanding the "Airport" Censorship Circumvention Ecosystem in China arXiv:2606.18427v1 Announce Type: new Abstract: In China, a burgeoning underground market sells citizens subscription-based censorship circumvention proxies known as ''airports''. We present the first systematic study of this ecosystem, combining user surveys, social media analysis, and active network measurements. We find that airports are by far the most popular off-the-shelf censorship circumvention t…
https://arxiv.org/abs/2606.18427
sha256:b89b03e748a3e615118301009a64da149426adf9e488a201f358a112a6c57b18
What we pulled out
Deterministic extractor (IOC + allowlisted tokens + ATT&CK IDs present in DB).
Indicators
Linked with report → mentions → indicator. Values open the indicator workspace.
No indicators linked for this report.
Malware families
Allowlist token matches only.
Threat actors mentioned
Allowlist mentions — not a formal attribution verdict.
ATT&CK techniques
MITRE IDs referenced in text and present in local technique table.
CONTINUE INVESTIGATION
High-signal pivots without leaving the thread you started in search.
Browse the report corpus.