Scarlet Mimic
Also reported as Golfing Taurus. Linked to China by three sources.
Reports per quarter
Techniques in ATT&CK
Listed by ATT&CK
No report from the last two years names a technique ID.
CVEs named in reports
- CVE-2009-3129 KEV
- CVE-2010-2572 KEV
- CVE-2010-2883 KEV
- CVE-2010-3333 KEV
- CVE-2011-0611 KEV
- CVE-2012-0158 KEV ransomware
- CVE-2012-4969 KEV
- CVE-2021-31207 KEV ransomware
- CVE-2021-34473 KEV ransomware
- CVE-2022-41040 KEV ransomware
- CVE-2022-41082 KEV ransomware
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
-
Scarlet Mimic - Threat Group Cards: A Threat Actor Encyclopedia
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Scarlet Mimic - Threat Group Cards: A Threat Actor Encyclopedia
-
7 Years of Scarlet Mimic’s Mobile Surveillance Campaign Targeting Uyghurs
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor 7 Years of Scarlet Mimic’s Mobile Surveillance Campaign Targeting Uyghurs
-
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor LazyScripter
-
The original link failed its last check. Original publisher Detailsfor mobile-malware-report.pdf
-
JadeRAT mobile surveillanceware spikes in espionage activity
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor JadeRAT mobile surveillanceware spikes in espionage activity
Show all 19 reports Show fewer
-
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Tracking Elirks Variants in Japan: Similarities to Previous Attacks - Palo Alto Networks BlogPalo Alto Networks Blog
-
Tracking Elirks Variants in Japan: Similarities to Previous Attacks
The link to Mirror on Box failed its last check. Mirror on Box Detailsfor Tracking Elirks Variants in Japan: Similarities to Previous Attacks
-
Shifting Tactics Tracking Changes In Years Long Espionage Campaign Against Tibetans
The link to Mirror on Box failed its last check. Mirror on Box Detailsfor Shifting Tactics Tracking Changes In Years Long Espionage Campaign Against Tibetans
-
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Shifting Tactics: Tracking changes in years-long espionage campaign against Tibetans - The Citizen Lab
-
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Scarlet Mimic: Years-Long Espionage Campaign Targets Minority Activists - Palo Alto Networks BlogPalo Alto Networks Blog
-
The link to Mirror on Box failed its last check. Mirror on Box Detailsfor Scarlet Mimic
-
Scarlet Mimic- Years-Long Espionage Campaign Targets Minority Activists
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Scarlet Mimic- Years-Long Espionage Campaign Targets Minority Activists
Newest first. Details opens the report in Explore.