RedCurl
UnattributedNo public state or group attribution on record
RedCurl is a threat actor active since 2018 notable for corporate espionage targeting a variety of locations, including Ukraine, Canada and the United Kingdom, and a variety of industries, including but not limited to travel agencies, insurance companies, and banks. RedCurl is allegedly a Russian-speaking threat actor.
MITRE ATT&CK Techniques
T1003.001T1005T1020T1027T1036.005T1039T1046T1053.005T1056.002T1059.001T1059.003T1059.005T1059.006T1070.004T1071.001T1080T1082T1083T1087.001T1087.002T1087.003T1102T1114.001T1119T1199T1202T1204.001T1204.002T1218.011T1537T1547.001T1552.001T1552.002T1555.003T1560.001T1564.001T1566.001T1566.002T1573.001T1573.002T1587.001
Associated Malware
No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.