FlagThis - Latest Cybersecurity News

Chinese-linked threat actor UNC6508 has conducted a multi-year espionage campaign since 2023 targeting North American medical research and defense organizations. The actor leverages sophisticated authentication bypasses within Google Workspace to infiltrate secure environments, specifically targeting REDCap (Research Electronic Data Capture) platforms to exfiltrate sensitive datasets. Technical objectives include the theft of intellectual property related to virology, artificial intelligence, and military research. Persistence is maintained via deployed backdoors and a dedicated Command and Control (C2) infrastructure designed for stealthy data exfiltration from critical research databases.