Chinese State-Sponsored RedJuliett Intensifies Taiwanese Government, Academic, and Technology Sector Cyber Espionage via Network Perimeter Exploitation

RedJuliett, a likely Chinese state-sponsored APT, conducted high-tempo cyber-espionage from November 2023–April 2024 focused on Taiwan and surrounding regions by exploiting internet-facing devices (firewalls, load balancers, VPNs) and web/SQL applications, administering infrastructure via SoftEther VPN (with servers and self-signed TLS certificates tied to Fuzhou), and performing reconnaissance, exploitation (SQL injection, directory traversal), and limited post-exploitation using open-source web shells and known vulnerabilities; the report includes victimology, IOCs (IP addresses, TLS fingerprints, domains), ATT&CK mappings, and recommended mitigations for detection and hardening.