MITRE ATT&CKgroup

G1042 RedEcho

Published 2024-11-21 Modified 2026-07-31 Official page ↗
Domain
enterprise
Version
1.0
Created
2024-11-21

Description

RedEcho is a People’s Republic of China-related threat actor associated with long-running intrusions in Indian critical infrastructure entities. RedEcho overlaps with various other PRC-linked threat groups, such as APT41, and is linked to ShadowPad malware use through shared infrastructure.

Related

Uses · MITRE ATT&CK (6)

  • S0596 ShadowPad software (malware)
  • T1583.001 Domains sub-technique
  • T1573.002 Asymmetric Cryptography sub-technique
  • T1071.001 Web Protocols sub-technique
  • T1571 Non-Standard Port technique
  • T1568 Dynamic Resolution technique

References