{
  "name": "Chinese State-Sponsored RedJuliett Intensifies Taiwanese Cyber Espionage via Network Perimeter Exploitation",
  "slug": "chinese-state-sponsored-redjuliett-intensifies-taiwanese-cyber-espionage-via-network-perimeter-exploitation",
  "description": "Chinese state-sponsored cyber-espionage group RedJuliett continues to target Taiwanese government, academic, technology companies and de facto embassies, according to a new report from Insikt Group.",
  "published": "2024-06-24T16:53:57+00:00",
  "created_at": "2024-06-24T16:53:57+00:00",
  "modified_at": "2024-06-24T17:22:46+00:00",
  "created_at_opencti": "2024-06-24T16:53:57+00:00",
  "author": "",
  "confidence": null,
  "report_types": [],
  "labels": [],
  "tags": [
    "2024-06-24",
    "beijing",
    "kenya",
    "laos",
    "redjuliett",
    "rwanda",
    "softether vpn",
    "taiwan"
  ],
  "related_entities": {
    "observables": [
      {
        "id": "",
        "name": "61.238.103.155"
      },
      {
        "id": "",
        "name": "38.147.190.192"
      },
      {
        "id": "",
        "name": "176.119.150.92"
      },
      {
        "id": "",
        "name": "154.197.98.3"
      },
      {
        "id": "",
        "name": "140.120.98.115"
      },
      {
        "id": "",
        "name": "137.220.36.87"
      },
      {
        "id": "",
        "name": "154.197.99.202"
      },
      {
        "id": "",
        "name": "122.10.89.230"
      },
      {
        "id": "",
        "name": "www.sofeter.ml"
      },
      {
        "id": "",
        "name": "www.dns361.tk"
      },
      {
        "id": "",
        "name": "cktime.ooguy.com"
      }
    ],
    "intrusion_sets": [
      {
        "id": "26539192-4ff1-41f9-89bf-28dad2ea2a28",
        "name": "RedJuliett",
        "slug": "redjuliett"
      }
    ],
    "attack_patterns": [
      {
        "id": "1e043fe4-2413-4b8e-887c-0fe45d095a24",
        "name": "T1583"
      },
      {
        "id": "eb118bf2-fdf2-4b49-a470-0acabf7608ad",
        "name": "T1505"
      },
      {
        "id": "d570881a-1f73-41ca-ad6c-fc29256c76f9",
        "name": "T1595"
      },
      {
        "id": "c340d47a-2ea8-41ca-9a0b-a72559b89bbf",
        "name": "T1584"
      },
      {
        "id": "6c8f8a40-2746-4a37-86bd-81e82afa6e62",
        "name": "T1190"
      },
      {
        "id": "b9eab970-53dd-4977-9a26-c4fe566e422d",
        "name": "T1133"
      },
      {
        "id": "64cdebc9-0fb4-48f2-bf4f-b87f3741f664",
        "name": "T1068"
      }
    ],
    "others": [
      {
        "id": "",
        "name": "Djibouti"
      },
      {
        "id": "",
        "name": "Rwanda"
      },
      {
        "id": "",
        "name": "Kenya"
      },
      {
        "id": "",
        "name": "Lao People's Democratic Republic"
      },
      {
        "id": "",
        "name": "Hong Kong"
      },
      {
        "id": "",
        "name": "Taiwan"
      },
      {
        "id": "",
        "name": "China"
      },
      {
        "id": "",
        "name": "Korea, Republic of"
      },
      {
        "id": "",
        "name": "Malaysia"
      },
      {
        "id": "",
        "name": "United States of America"
      },
      {
        "id": "",
        "name": "Technology"
      },
      {
        "id": "",
        "name": "Government"
      }
    ]
  },
  "external_refs": [
    "https://www.recordedfuture.com/redjuliett-intensifies-taiwanese-cyber-espionage-via-network-perimeter",
    "https://otx.alienvault.com/pulse/6679c0c6141e6c357e4ffe7c"
  ]
}