| SYMBOL | COMMON_NAME | aka. SYNONYMS |
Recorded Future’s Insikt Group has identified two new cyberespionage campaigns targeting the Tibetan Community over the past two years. The campaigns, which we are collectively naming RedAlpha, combine light reconnaissance, selective targeting, and diverse malicious tooling. We discovered this activity as the result of pivoting off of a new malware sample observed targeting the Tibetan community based in India.
There are currently no families associated with this actor.
| 2022-08-16 ⋅ Recorded Future ⋅ RedAlpha Conducts Multi-Year Credential Theft Campaign Targeting Global Humanitarian, Think Tank, and Government Organizations RedAlpha |
| 2022-04-28 ⋅ PWC ⋅ Cyber Threats 2021: A Year in Retrospect APT15 APT31 APT41 APT9 BlackTech BRONZE EDGEWOOD DAGGER PANDA Earth Lusca HAFNIUM HAZY TIGER Inception Framework LOTUS PANDA QUILTED TIGER RedAlpha Red Dev 17 Red Menshen Red Nue VICEROY TIGER |
| 2018-08-16 ⋅ Recorded Future ⋅ Chinese Cyberespionage Originating From Tsinghua University Infrastructure ext4 RedAlpha |
| 2018-06-26 ⋅ Recorded Future ⋅ RedAlpha: New Campaigns Discovered Targeting the Tibetan Community RedAlpha RedAlpha |
| 2018-06-26 ⋅ Recorded Future ⋅ RedAlpha: New Campaigns Discovered Targeting theTibetan Community RedAlpha |