Home / Threat actors / RedEcho
RedEcho G1042
Updated at source on Jul 31, 2026 · View on MITRE ATT&CK
0
associated CVEs
5
Techniques
1
Malware and tools
RedEcho is a People’s Republic of China-related threat actor associated with long-running intrusions in Indian critical infrastructure entities. RedEcho overlaps with various other PRC-linked threat groups, such as APT41, and is linked to ShadowPad malware use through shared infrastructure.
Exploited vulnerabilities
CVEs cited by MITRE ATT&CK for this group, with the source excerpt. Records not yet published here appear without a link.
ATT&CK does not cite CVEs for this group.
Techniques by tactic
Resource Development
T1583.001 Domains Command and Control
T1071.001 Web ProtocolsT1568 Dynamic ResolutionT1571 Non-Standard PortT1573.002 Asymmetric Cryptography Malware and tools
- ShadowPadMalwareS0596
© The MITRE Corporation. ATT&CK® content reproduced and distributed with the permission of The MITRE Corporation.