MEDIUMApt
Global

Chinese Espionage Actor Abuses Email Rules to Steal Research Data

·Source: Bank Info Security

Updated:

Executive Summary

Threat Actor Silently Forwarded Sensitive Emails Matching Strategic Topics Google says Chinese espionage group UNC6508 compromised REDCap environments at North American research institutions, deployed cus

Analysis

Threat Actor Silently Forwarded Sensitive Emails Matching Strategic Topics Google says Chinese espionage group UNC6508 compromised REDCap environments at North American research institutions, deployed custom malware, stole credentials and covertly forwarded strategically relevant emails through abused compliance rules to support long-term intelligence collection.

Indicators of Compromise (2)

URL (1)
https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/new-chinese-espionage-actor-abuses-email-rules-to-steal-research-data-image_small-9-a-31993.jpg
Domain (1)
ismg-cdn.nyc3.cdn.digitaloceanspaces.com
Source Attribution

Originally published by Bank Info Security on Jun 17, 2026.

Related Threats