Google says UNC6508 used REDCap backdoors and Workspace rules to copy research and defense emails across U.S. and Canadian networks.

A China-linked espionage campaign targeted exposed REDCap servers to deploy the InfiniteRed malware and steal sensitive data from a medical institution in North America.

Google says the intruders were on the hunt for everything from drone tech to pathogens