RedCurl
RedCurl is a Russia-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets 11 sectors, including Government and Technology, in 13 countries, including the United States and the United Kingdom. It uses 63 MITRE ATT&CK techniques.
- Gold Blade
- Earth Kapre
- Red Wolf
- Origin
- Russia
- Techniques
- 63
- Exploited CVEs
- No CVE data
- First seen
- Jan 1, 2018
- Last seen
- Mar 6, 2024
- Record updated
Who They Target.
About RedCurl.
RedCurl is a threat actor active since 2018 notable for corporate espionage targeting a variety of locations, including Ukraine, Canada and the United Kingdom, and a variety of industries, including but not limited to travel agencies, insurance companies, and banks. RedCurl is allegedly a Russian-speaking threat actor.
Last updated Sep 11, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.