Last observed
Campaign
Indian Critical Infrastructure Intrusions last observed
The campaign source marks this as the latest known activity date.
MITRE ATT&CKSource
ActiveMITRE ATT&CK
Indian Critical Infrastructure Intrusions
Indian Critical Infrastructure Intrusions is a sequence of intrusions from 2021 through early 2022 linked to People’s Republic of China (PRC) threat actors, particularly RedEcho and Threat Activity Group 38 (TAG38). The intrusions appear focused on IT system breach in Indian electric utility entities and logistics firms, as well as potentially managed service providers operating within India. Although focused on OT-operating entities, there is no evidence this campaign was able to progress beyond IT breach and information gathering to OT environment access.
First observedJan 1, 2021
Last observedApr 1, 2022
Attributed actors0
Source-backed events2
Attribution
Who has been linked to this activity
Each relationship retains its own confidence and source.
No actor attribution is currently available.
Activity
Campaign timeline
Every date says what it measures so catalog dates are not confused with publication dates.
First observed
Campaign
Indian Critical Infrastructure Intrusions first observed
The campaign source marks this as the beginning of the known activity window.
MITRE ATT&CKSource
About the context below
CVEs, techniques, malware, and indicators in the sections below are associated with an attributed actor. They are useful investigative context, but the campaign source does not necessarily link every item directly to this campaign.
Investigation context
What the attributed actors are known to use
Use this material to guide hunting and prioritization, then confirm each relationship against its cited source.
Related vulnerabilities 0
No linked CVEs are available.
ATT&CK techniques 0
No linked techniques are available.
Malware and tools 0
No linked malware or tools are available.
Indicators 0
No source-linked indicators are available.
Sources
Evidence behind this page
Open the original material before making an attribution or response decision.