Threat actorChinaTracked since 2026-02

Red Menshen

Also known as:Earth BluecrowRed Dev 18DecisiveArchitect

As of 2026-05-30, Red Menshen is a China-nexus threat actor tracked by Threadlinqs Intelligence across 1 threat spanning apt. Also known as Earth Bluecrow, Red Dev 18, DecisiveArchitect.

Tracked threats: 11 critical
First seen: 2026-022026-02-15
Last seen: 2026-022026-02-15
ATT&CK techniques: —No mapped techniques yet
Related CVEs: 0None referenced
Attribution: ChinaNation or origin

Nation: China · 1 tracked threat(s) · Categories: APT

Activity timeline

Red Menshen appears in 1 tracked threat between 2026-02-15 and 2026-02-15.

Tracked threats

BPFDoor — Chinese Nation-State Linux Backdoor Using Berkeley Packet Filters for Covert C2 ActivationCRITICAL2026-02-15