Scarlet Mimic — ATT&CK profile, 1 technique

Overview

Scarlet Mimic is a threat group that has targeted minority rights activists. This group has not been directly linked to a government source, but the group's motivations appear to overlap with those of the Chinese government. While there is some overlap between IP addresses used by Scarlet Mimic and Putter Panda, it has not been concluded that the groups are the same.

Naming & attribution

It uses 1 documented ATT&CK technique — more than 2% of the 174 groups tracked here.

Who calls this group what — MITRE lists each alias with the report that used it, but not which vendor coined it.
Name	First reported by
Scarlet Mimic	Falcone, R. and Miller-Osborn, J.

Targets

Activists

Capabilities

Custom malware/implant development — ATT&CK: 4 attributed custom malware families

TTPs — 1 technique across 1 tactic

Stealth

T1036.002 Right-to-Left Override

Tools & malware (4)

Psylo · MobileOrder · CallMe · FakeM

Reporting (1)

Scarlet Mimic: Years-Long Espionage Campaign Targets Minority Activists — Falcone, R. and Miller-Osborn, J.