logo

Chinese State-Sponsored RedJuliett Intensifies Taiwanese Cyber Espionage via Network Perimeter Exploitation

ID: 58b1a11a-eece-5be1-a368-b1290ae2bf7a

STIX ID: report--58b1a11a-eece-5be1-a368-b1290ae2bf7a

Feed Name: Recorded Future Blog

Threat Score
88/100

Date Published: 2024-06-24

Date Updated: 2026-04-28

...
...

**Insikt Group: RedJuliett cyber-espionage against Taiwan** — From Nov 2023 to Apr 2024 Insikt Group attributes a sustained cyber-espionage campaign to RedJuliett, a likely China-aligned APT operating from Fuzhou, that leveraged internet-facing device RCEs, SQL injection, directory traversal, SoftEther VPN infrastructure, and web shells to compromise or attempt reconnaissance of Taiwanese government, academic, technology, and diplomatic entities and additional targets across Asia and Africa; the report details exploited techniques, infrastructure patterns, affected sectors (24 confirmed compromises and 70+ attempted targets), and provides mitigation recommendations including network segmentation, prioritized patching, and enhanced monitoring.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.