China-linked UNC6508 Cyber Espionage Campaign Targets North American Medical Research
ID: 2d98b3fa-e07b-59a3-ae0e-adf41b1ef6c8
STIX ID: report--2d98b3fa-e07b-59a3-ae0e-adf41b1ef6c8
Feed Name: ThreatCluster
Threat Score
A China-linked APT, UNC6508, conducted a multi-year espionage campaign (Sep 2023–Nov 2025) against North American academic, medical, and military research institutions by exploiting REDCap server vulnerabilities to deploy custom malware (Infinitered), steal credentials, and exfiltrate sensitive research and military-related information; Google’s Threat Intelligence Group discovered and disrupted the operation in late 2025 and notified victims.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.