[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fLdDEKMSE87MkD9wxbJUN2TisgwBtXI799DT8Q6e26s8":3},{"success":4,"data":5},true,{"name":6,"slug":7,"aliases":8,"description":9,"country":10,"suspected_sponsor":11,"target_industries":12,"target_countries":20,"incident_types":21,"references":22,"techniques":25,"technique_count":26,"created_at":27,"seoMetadata":28,"schemaOrg":32},"RedGolf","redgolf",[],"Recorded Future’s Insikt Group has identified a large cluster of new operational infrastructure associated with use of the custom Windows and Linux backdoor KEYPLUG. We attribute this activity to a threat activity group tracked as RedGolf, which is highly likely to be a Chinese state-sponsored group. RedGolf closely overlaps with threat activity reported in open sources under the aliases APT41\u002FBARIUM and has likely carried out state-sponsored espionage activity in parallel with financially motivated operations for personal gain from at least 2014 onward.","CN","China",[13,14,15,16,17,18,19],"Aviation","Automotive","Education","Intergovernmental","Media and Entertainment","Information Technology","Religious Organizations",[],[],[23,24],"https:\u002F\u002Fgo.recordedfuture.com\u002Fhubfs\u002Freports\u002Fcta-2023-0330.pdf","https:\u002F\u002Fwww.justice.gov\u002Fopa\u002Fpr\u002Fseven-international-cyber-defendants-including-apt41-actors-charged-connection-computer",[],0,"2023-08-09T17:25:09.409843+00:00",{"title":29,"metaDescription":30,"keywords":31},"RedGolf Threat Actor Profile | Precursor Intelligence","Recorded Future’s Insikt Group has identified a large cluster of new operational infrastructure associated with use of the custom Windows and Linux ba...","RedGolf, threat actor, APT, cyber threat, threat intelligence, Aviation, Automotive, Education, China, CN",{"@context":33,"@type":34,"name":6,"alternateName":35,"description":9,"url":36,"mainEntityOfPage":37,"location":39},"https:\u002F\u002Fschema.org","Organization",[],"http:\u002F\u002Flocalhost:3000\u002Fthreat-actors\u002Fredgolf",{"@type":38,"@id":36},"WebPage",{"@type":40,"name":10},"Country"]