Redfly hacked a national electricity grid organization in Asia and maintained persistent access to the network for about six months. Researchers discovered evidence for this attack between 28 February and 3 August 2023 after noticing suspicious malware activity within the organization’s network.
Redfly is a threat actor that targeted a national electricity grid organization in Asia. It maintained persistent access to the electricity grid organization's network for six months.
Researchers discovered evidence for Redfly's activity between 28 February and 3 August 2023 after noticing suspicious malware activity within the network.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.