NASA’s new dark energy space telescope can also detect killer asteroids
technologyreview.com·2h ago
Cloud & Infrastructure
Google Cloud Blog·Jun 15·5 min read
Public and Private Medical Community Targeted by China-Nexus Threat Actor Pursuing Artificial Intelligence, Cyber, Medical, and National Defense Research
TL;DR
A sophisticated cyber threat actor, UNC6508, targeted North American medical and military research institutions to steal sensitive data. They exploited REDCap servers and deployed custom malware called INFINITERED to capture login credentials.
✦ Why It Matters
Engineers should implement strong security practices, including 2-Step Verification, to protect sensitive data from similar threats.
Key Takeaways
- Enforce 2-Step Verification for all accounts.
- Regularly update and patch software to close vulnerabilities.
- Monitor audit logs for unauthorized changes.
- Implement Data Loss Prevention rules to protect sensitive data.
How It Works
UNC6508 exploited vulnerabilities in REDCap servers to deploy INFINITERED, which captured login credentials and maintained persistence through software updates. The malware injected itself into legitimate system files, allowing it to harvest user credentials and execute commands remotely.