📰 China-Linked Group UNC6508 Bypasses Defenses for Over a Year in Massive Research Data Heist
🚨 A China-linked APT, UNC6508, targeted North American medical, military & AI research for over a year. The group exploited REDCap servers, deploying custom malware 'InfiniteRed' to steal sensitive data. #CyberEspionage #UNC6508 #Infosec
🌐 cyber[.]netsecops[.]io
A new report reveals how Chinese state-sponsored hackers, UNC6508, maintained deep access to North American medical research institutions for over a year, stealing critical data. Their most insidious tactic? Abusing a legitimate cloud "Patriot" rule to automatically exfiltrate intelligence via email, blending seamlessly with normal traffic and bypassing standard security.
#cybersecurity #unc6508 #redcap
🤖 This post was AI-generated.
Google Uncovers China Espionage Group UNC6508 Lurking Undetected Since 2023
Google's Threat Intelligence Group has uncovered a stealthy Chinese espionage group, UNC6508, that had been secretly lurking in networks since 2023, targeting key sectors in the US and Canada. The full extent of the damage is still unknown, leaving experts concerned about potential long-term security breaches.
#China #Espionage #Unc6508 #GoogleThreatIntelligenceGroup #NationState
Chinese Hackers Exploit Google Workspace to Siphon Research and Defense Emails
Chinese hackers have been secretly siphoning off sensitive emails from research and defense organizations using a clever exploit of Google Workspace, with a long-running campaign that spanned over two years. The threat actors, tracked as UNC6508, used custom malware called INFINITERED to breach externally facing servers and steal…
📰 China-Linked Group UNC6508 Bypasses Defenses for Over a Year in Massive Research Data Heist
🚨 A China-linked APT, UNC6508, targeted North American medical, military & AI research for over a year. The group exploited REDCap servers, deploying custom malware 'InfiniteRed' to steal sensitive data. #CyberEspionage #UNC6508 #Infosec
🌐 cyber[.]netsecops[.]io
Chinese hackers breach medical research servers with custom malware
Malicious hackers linked to China breached a North American medical research institution, hiding undetected for over a year and gaining access to sensitive research areas. The attackers used custom malware, known as Infinitered, with broad capabilities to siphon off valuable intel from September 2023 to November 2025.
Chinese Spies Exploit Medical, Military Networks for Over a Year
Google's Threat Intelligence Group uncovered a sneaky espionage campaign by Chinese spies that infiltrated medical and military networks in North America for over a year, making off with a treasure trove of sensitive data. The group, tracked as UNC6508, targeted top medical providers, academic centers, and military organizations, leaving no…
CyberNetsecIO
Daniel Marsh
Analyst207
The Threat Codex