FlagThis
← Threat Actors
/
China
/
UNC6508
DOSSIER // UNC6508
UNC6508
ACTIVE CAMPAIGN TRACKED
▲ High Threat
China
Sponsor / State Affiliation
People's Republic of China (PRC)
Primary Motivation
Strategic Espionage (Intelligence gathering on AI, uncrewed vehicle systems, national defense, and medical research)
Confidence Rating
95% (Grounded)
North American Research Espionage Campaign
📥 Export ATT&CK Layer (.json)
🔔 RSS Feed
🏛️ CISA Advisories ↗
📋 Copy Dossier Briefing
🎯 Target Sectors & Focus
Academic Research Institutions
Medical Research Centers
Military Health Institutions
National Defense Organizations
Public Health Regulatory Bodies
Professional Advocacy Groups
🛡️ MITRE ATT&CK® Attack Lifecycle
(8 TTPs)
📥 Download Navigator JSON
All Stages
8
Persistence & Privilege Escalation
1
Credential Access & Discovery
1
Lateral Movement & Collection
1
Command & Control
3
Operational Techniques
2
Persistence & Privilege Escalation
1
T1547
Persistence via web shells (e.g., help.php)
↗
Credential Access & Discovery
1
T1003
Credential harvesting via web application vulnerabilities (CWE-287, CWE-494)
↗
Lateral Movement & Collection
1
T1021
Abuse of enterprise administrative tools for lateral movement
↗
Command & Control
3
T1071
Deployment of custom malware (INFINITERED)
↗
T1071
Stealthy data exfiltration via domain content compliance rules (BCC forwarding to Gmail)
↗
T1071
Disciplined operational security to evade EDR and network monitoring
↗
Operational Techniques
2
T1000
Exploitation of REDCap (Research Electronic Data Capture) servers
↗
T1000
Use of trojanized system files as recursive droppers
↗
📰 Verified Campaigns & Intelligence Archive
🔔 Subscribe to Alerts
[DEEP DIVE]
Google Threat Intelligence Group Warns of Autonomous AI Agentic Attack Systems
Attacks and Vulnerabilities
2026-09-19
[DEEP DIVE]
UNC6508 Espionage Campaign Targeting Google Workspace and REDCap
Attacks and Vulnerabilities
2026-06-21
Adversary Rosetta Stone // UNC6508
×
Copied to clipboard
SHARE INTELLIGENCE WIRE
×
Story Title
X / Twitter
Bluesky
LinkedIn
Copy Link
LINK COPIED TO CLIPBOARD