RedEcho
- ID
- G1042
- Source
- attack.mitre.org
- MITRE last modified
- 1 Aug 2026
RedEcho is a People’s Republic of China-related threat actor associated with long-running intrusions in Indian critical infrastructure entities. RedEcho overlaps with various other PRC-linked threat groups, such as APT41, and is linked to ShadowPad malware use through shared infrastructure.[1][2]
Techniques used (5)
- T1071.001 Web Protocols
- T1568 Dynamic Resolution
- T1571 Non-Standard Port
- T1573.002 Asymmetric Cryptography
- T1583.001 Domains