UNC6508

UNC6508 is a Chinese-linked hacking group that conducts cyberespionage campaigns targeting academic, medical, and military research institutions to steal sensitive data.

Why it’s in the news: It is in the news because Google identified its 14-month-long campaign targeting U.S. and Canadian research facilities, including military and AI networks, in real time.

Latest on UNC6508

• Google identified UNC6508 mid-campaign, which means the infrastructure existed to catch this.
• A Chinese-linked hacking group designated UNC6508 conducted a cyberespionage campaign targeting U.S. and Canadian academic, medical, and military research institutions from September 2023 to November 2025.
• Google identified the group stealing data related to defense, military strategy, artificial intelligence, and medical research.
• Chinese hackers spent 14 months inside US military and AI research networks while Google's threat detection — the industry standard — watched it happen in real time.
• Google's Threat Intelligence Group identified a Chinese cyberespionage group called UNC6508 targeting medical, military, and AI research facilities across North America since early 2025.
• UNC6508 has conducted attacks on organizations in the healthcare, defense, and artificial intelligence sectors to steal sensitive research and intellectual property.
• Hospitals, defense contractors, and AI labs across North America have been breached by the same group since January

Connections

11 entities linked to UNC6508 across the news graph.