Story perspectives

Google Links UNC6508 Hack to Chinese Espionage, Targets Defense, AI

6/16/2026

Summary

Story summary

Google traced a year-long cyber-espionage campaign to the identified group UNC6508, linking it to Chinese-linked hacking.
Hackers exploited REDCap flaws, stole credentials and auto-forwarded emails with 150 keywords to a Gmail account they controlled.
Google warned U.S. and Canadian organizations that the intrusion (Sept 2023–Nov 2025) targeted defense, AI, unmanned vehicles, cyber-warfare and medical research; Google’s Threat Intelligence Group said the tactics match Chinese-linked patterns; the Chinese Embassy declined comment.

1 of 1

Story summary

Google traced a year-long cyber-espionage campaign to the identified group UNC6508, linking it to Chinese-linked hacking.
Hackers exploited REDCap flaws, stole credentials and auto-forwarded emails with 150 keywords to a Gmail account they controlled.
Google warned U.S. and Canadian organizations that the intrusion (Sept 2023–Nov 2025) targeted defense, AI, unmanned vehicles, cyber-warfare and medical research; Google’s Threat Intelligence Group said the tactics match Chinese-linked patterns; the Chinese Embassy declined comment.