Threat actorhigh

RedHotel: A Prolific, Chinese State-Sponsored Group Operating at a Global Scale

Recorded Futureby Insikt GroupAug 22, 2025 · 00:00 UTC (Aug 22, 2025)5 min read2 · 1 read

Read at recordedfuture.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-24682 CVE-2022-27924 CVE-2022-27925 CVE-2022-37042 CVE-2022-30333

Tags: cve-2022-24682 cve-2022-27924 cve-2022-27925 cve-2022-37042 cve-2022-30333 threat-actor

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-24682	Cross-Site Scripting in Synacor Zimbra Collaboration Suite Calendar	6.1	31%	KEVRansomwarePoC	Feb 9, 2022 KEV Feb 25, 2022
CVE-2022-27924 +1 related CVE CVE-2022-27925	Unauthenticated Memcache Command Injection in Synacor Zimbra Collaboration Suite	7.5 group max	94%	KEVRansomware	Apr 21, 2022 KEV Aug 4, 2022
CVE-2022-30333	Directory Traversal in RARLAB UnRAR (Linux/UNIX) Enables Arbitrary File Writes	7.5	99%	KEVRansomwarePoC ×2	May 9, 2022 KEV Aug 9, 2022
CVE-2022-37042	Unauthenticated ZIP Path Traversal RCE in Synacor Zimbra Collaboration Suite	9.8	92%	KEVRansomwarePoC	Aug 12, 2022 KEV Aug 11, 2022

From the original article

5 min read at recordedfuture.com

New Insikt Group research examines RedHotel, a Chinese state-sponsored threat activity group that stands out due to its persistence, operational intensity, and global reach. RedHotel's operations span 17 countries in Asia, Europe, and North America from 2021 to 2023. Its targets encompass academia, aerospace, government, media, telecommunications, and research sectors.

Recorded Future

By Insikt Group · recordedfuture.com

Read the full article at Recorded Future

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.