"Google Threat Intelligence Group identified a PRC-nexus espionage group, UNC6508, targeting North American research institutions. The attackers exploited REDCap servers to deploy custom malware and exfiltrate sensitive data. The campaign, active since at least 2023, targeted research on drone technology, pathogens, and military readiness."