Automation · API / MCP 中文

Group profile · G0029

Scarlet Mimic

Scarlet Mimic is a threat group that has targeted minority rights activists. This group has not been directly linked to a government source, but the group's motivations appear to overlap with those of the Chinese government. While there is some overlap between IP addresses used by Scarlet Mimic and Putter Panda, it has not been concluded that the groups are the same.

ATT&CK G0029 Confidence High · 100 Source src_mitre_attck_enterprise Status active
All2017

Scarlet Mimic is a threat group that has targeted minority rights activists. This group has not been directly linked to a government source, but the group's motivations appear to overlap with those of the Chinese government. While there is some overlap between IP addresses used by Scarlet Mimic and Putter Panda, it has not been concluded that the groups are the same. 1

  1. Scarlet Mimic Jan 2016

Claims and citations

Every claim comes from a writer; provenance is the writer's assertion, not a review verdict from this directory. Validity reads by citation year.

predicateobjectValidConf.Evidence
also_known_asScarlet Mimic— → …100src_mitre_attck_enterprise
uses_techniquetech_t1036.0022017 → …100src_mitre_attck_enterprise

Technique use

ATT&CKTechniqueplatforms
T1036.002Right-to-Left Override—

Aliases

Scarlet Mimic

Reading and review

Records are auto-ingested and not human-reviewed. Confidence is the writer's 0–100 value; bands split at ≥80 / 50–79 / <50 into high / medium / low. The four trust axes (synthetic, lifecycle, band, source count) stay separate and never merge into one score.

Corrections