Google says UNC6508 used REDCap backdoors and Workspace rules to copy research and defense emails across U.S. and Canadian ...
A China-linked group backdoored REDCap servers at US and Canadian medical and military research institutions, then used Google Workspace to exfiltrate email.