Google discovered and disrupted the sprawling campaign, which stole RedCAP credentials and exfiltrated data by abusing content-compliance rules.

A China-linked espionage campaign targeted exposed REDCap servers to deploy the InfiniteRed malware and steal sensitive data from a medical institution in North America.

Google says the intruders were on the hunt for everything from drone tech to pathogens