Skip to content
Nation-state APTEspionageIntermediate sophistication · State-backed

RedEcho

RedEcho is a China-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets 5 sectors, including Manufacturing, and Transportation and Logistics, in 11 countries, including India and Indonesia. It uses 5 MITRE ATT&CK techniques and exploits 4 known CVEs.

Also known as
  • G1042
Origin
China
Techniques
5
Exploited CVEs
4
First seen
Jan 1, 2020
Last seen
Feb 28, 2021
Record updated

Who They Target.

About RedEcho.

RedEcho is a People’s Republic of China-related threat actor associated with long-running intrusions in Indian critical infrastructure entities. RedEcho overlaps with various other PRC-linked threat groups, such as APT41, and is linked to ShadowPad malware use through shared infrastructure.

Last updated Sep 30, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.