RedAlpha
Aliases: DeepCliff, Red Dev 3
- First seen
- 2018-06-01 00:00:00
- Primary motivation
- espionage
- Sophistication
- intermediate
- Resource level
- government
- Actor type
- nation-state
- Profile updated
- 2026-07-07 11:47:52
Targeted industries: education-and-nonprofits government-and-public-sector
Targeted regions: country_code:in
Context
Recorded Future’s Insikt Group has identified two new cyberespionage campaigns targeting the Tibetan Community over the past two years. The campaigns, which we are collectively naming RedAlpha, combine light reconnaissance, selective targeting, and diverse malicious tooling. We discovered this activity as the result of pivoting off of a new malware sample observed targeting the Tibetan community based in India.
Reports & references
- pwc.com — Yir Cyber Threats Report Download (report)
- recordedfuture.com — Chinese Cyberespionage Operations (report)
- go.recordedfuture.com — Cta 2018 0626 (report)
- go.recordedfuture.com — Ta 2022 0816 (report)