A China-linked group backdoored REDCap servers at US and Canadian medical and military research institutions, then used Google Workspace to exfiltrate email.

A China-linked espionage campaign targeted exposed REDCap servers to deploy the InfiniteRed malware and steal sensitive data from a medical institution in North America.

Google says the intruders were on the hunt for everything from drone tech to pathogens

A Chinese-linked hacking group secretly stole data from U.S. and Canadian academic, medical, and military research institutions. The cyberespionage campaign lasted over a year.…

Google discovered and disrupted the sprawling campaign, which stole RedCAP credentials and exfiltrated data by abusing content-compliance rules.

Google says UNC6508 used REDCap backdoors and Workspace rules to copy research and defense emails across U.S. and Canadian networks.

A China-linked group backdoored REDCap servers at US and Canadian medical and military research institutions, then used Google Workspace to exfiltrate email.

Google attributes the campaign to a hacking group it calls UNC6508, a relatively new and little-known cyberespionage player

Google security researchers uncover alleged China-linked group that exfiltrated messages from research institutions for months