Group-IB has released an analytical report on the APT group RedCurl, which focuses on corporate espionage. The report includes details about the groups tactics, tools, and infrastructure. In less than three years, the group attacked dozens of targets all over the world from Russia to Canada. The attackers seek to steal documents that contain commercial secrets and employee personal data. The earliest known attack dates back to May 2018, the initial compromise vector was a well-written phishing email. In all campaigns, the main goal was to steal confidential corporate documents such as contracts, financial documents.”]
Source: https://securityaffairs.co/wordpress/107094/apt/redcurl-hacking-group.html