Chinese Hackers Breach REDCap Servers, Steal Medical Research Data

A China-linked APT campaign has been observed exploiting internet-exposed REDCap servers to install a novel implant named "InfiniteRed" and steal clinical and biomedical research data. The report outlines the attack chain (initial access via exposed REDCap, malware deployment, data collection, and covert exfiltration), attributes the activity to state-linked actors consistent with prior healthcare targeting, notes at least one North American institution impacted, and provides mitigation and reporting guidance for REDCap administrators.