China‑aligned UNC6508 used REDCap malware to spy on US research for a year
Google Threat Intelligence Group and Mandiant uncovered UNC6508, a new China‑aligned actor, running a year‑long espionage campaign against US medical, academic and military research labs. The group deployed custom REDCap malware, Infini, to siphon credentials and exfiltrate data stealthily. The breach exposes billions in research funding and highlights a fresh supply‑chain threat to critical health research.