UNC6508

UNC6508 is a Chinese-linked cyberespionage group that conducted a hacking campaign targeting U.S. and Canadian academic, medical, and military research institutions from September 2023 to November 2025, stealing data related to defense, military strategy, artificial intelligence, and medical research.

Why it’s in the news: It is in the news because Google's Threat Intelligence Group identified the group's 14-month-long campaign while it was actively operating in real time.

Latest on UNC6508

• Google identified UNC6508 mid-campaign, which means the infrastructure existed to catch this.
• A Chinese-linked hacking group designated UNC6508 conducted a cyberespionage campaign targeting U.S. and Canadian academic, medical, and military research institutions from September 2023 to November 2025.
• Google identified the group stealing data related to defense, military strategy, artificial intelligence, and medical research.
• Chinese hackers spent 14 months inside US military and AI research networks while Google's threat detection — the industry standard — watched it happen in real time.
• Google's Threat Intelligence Group identified a Chinese cyberespionage group called UNC6508 targeting medical, military, and AI research facilities across North America since early 2025.
• UNC6508 has conducted attacks on organizations in the healthcare, defense, and artificial intelligence sectors to steal sensitive research and intellectual property.
• Hospitals, defense contractors, and AI labs across North America have been breached by the same group since January

Connections

11 entities linked to UNC6508 across the news graph.