RedEcho
RedEcho is a People’s Republic of China-related threat actor associated with long-running intrusions in Indian critical infrastructure entities. RedEcho overlaps with various other PRC-linked threat groups, such as APT41, and is linked to ShadowPad malware use through shared infrastructure.
- ATT&CK ID
- G1042
- Origin
- China
- Techniques
- 5
- Tools
- 1
Techniques
Resource Development
Command and Control
Application Layer ProtocolDynamic ResolutionNon-Standard PortEncrypted Channel
Software
ShadowPad