Data BreachBleeping Computer
8.0 — CRITICAL
Chinese hackers breach REDCap servers, steal medical research
A China-linked espionage campaign targeted exposed REDCap servers to deploy the InfiniteRed malware and steal sensitive data from a medical institution in North America. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
A China-linked threat actor, UNC6508, breached a medical research organization's REDCap servers, deploying custom malware InfiniteRed to steal sensitive data over more than a year.
⚙️Technical Details
Affected Systems
REDCap servers
Attack Vectors
older, vulnerable versions of REDCap
💥Impact Assessment
Severity: High
Who Is at Risk
Medical research organizations using REDCap platforms in North America
🛡️Recommended Actions
1Upgrade to the latest available versions of REDCap
2Implement MFA/2SV on high-privilege accounts
3Use Device Bound Session Credentials (DBSC) to prevent session hijacking
📦Affected Products
Product Name: REDCapAffected Software: True
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.