ATT&CKGroupsScarlet Mimic

Scarlet Mimic

G0029

Threat group.View on attack.mitre.org

About this group

Scarlet Mimic is a threat group that has targeted minority rights activists. This group has not been directly linked to a government source, but the group's motivations appear to overlap with those of the Chinese government. While there is some overlap between IP addresses used by Scarlet Mimic and Putter Panda, it has not been concluded that the groups are the same.

Techniques used1

Procedure examples1

TechniqueProcedure example
T1036.002
Right-to-Left Override

Scarlet Mimic has used the left-to-right override character in self-extracting RAR archive spearphishing attachment file names.

Software4

Campaigns0

None recorded.

References1

  1. Scarlet Mimic Jan 2016 Open source
    Falcone, R. and Miller-Osborn, J.. (2016, January 24). Scarlet Mimic: Years-Long Espionage Campaign Targets Minority Activists. Retrieved February 10, 2016.

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.