🇨🇳

RedAlpha

APT Group Information theft and espionage 8 zero-day CVEs ETDA ✓

Also Known As 2 names

DeepCliff Red Dev 3

Target Countries 8

Countries highlighted in red

China Hong Kong India Sri Lanka Myanmar Pakistan Thailand United States

Sectors Targeted

Civic and Social Organizations 8134 Data Processing, Hosting, and Related Services 51821 Government the Tibetan and Uyghur communities and Falun Gong supporters

Details

Origin 🇨🇳 CN
Last Updated 01 Jun 2022

MITRE ATT&CK 99

T1003 T1005 T1007 T1008 T1011 T1012 T1016 T1021 T1027 - Obfuscated Files or Information T1033 T1036 T1041 T1047 T1048 T1049 T1053 T1055 T1057 T1059 T1059.001 T1059.003 T1060 T1070 T1071 T1071.001 T1078 T1081 T1082 T1083 T1085 T1087 T1090 T1095 T1102 - Web Service T1105 T1106 T1110 T1112 T1114 T1114.001 T1115 T1119 T1120 T1124 T1127 T1130 T1132 T1133 T1134.001 T1136 T1137 T1140 T1170 T1176 T1190 T1203 T1204 - User Execution T1204.001 T1204.002 T1212 T1217 T1218 T1485 T1486 T1489 T1490 T1497 T1497.003 T1503 T1505 T1518 T1529 T1530 T1531 T1539 T1543 T1547 T1550 T1552 T1553 T1555 T1560 T1561 T1562 T1562.001 T1566 - Phishing T1566.001 T1571 T1573 T1583 - Acquire Infrastructure T1587 - Develop Capabilities T1588 - Obtain Capabilities T1589 - Gather Victim Identity Information T1590 - Gather Victim Network Information T1592 - Gather Victim Host Information T1595 T1596 - Search Open Technical Databases T1598 - Phishing for Information T1608 - Stage Capabilities

Related Zero-Days 8

CVE-2018-0802 CVE-2018-8174 CVE-2020-1472 CVE-2022-1040 CVE-2022-30190 CVE-2022-42475 CVE-2023-36884 CVE-2023-38831