Scarlet Mimic: Years-Long Espionage Campaign Targets Minority Activists - Palo Alto Networks BlogPalo Alto Networks Blog

Unit 42 analyzes Scarlet Mimic, a long-running cyber espionage campaign targeting Uyghur and Tibetan activists and other entities, using the FakeM backdoor and related loaders to compromise Windows, OS X, and Android devices via spear-phishing and watering hole attacks. The report traces multiple variants and infrastructure overlap with related tools, assesses the actors' capabilities and evolution, and recommends prevention and detection countermeasures.