← All Threat Actors
Threat Actor Profile

RedEcho

G1042
▲ High Threat
RedEcho: The group made heavy use of AXIOMATICASYMPTOTE — a term we use to track infrastructure that comprises ShadowPad C2s, which is shared between several Chinese threat activity groups
Origin

Known TTPs

Dynamic Resolution
Web Protocols
Non-Standard Port
Asymmetric Cryptography
Domains

External Resources

CISA Advisories ↗

Related Intelligence

Hacking the mainframe…

LINK COPIED TO CLIPBOARD