Earth Lusca
TAG-22Charcoal TyphoonCHROMIUMControlX
UnattributedNo public state or group attribution on record
Earth Lusca is a suspected China-based cyber espionage group that has been active since at least April 2019. Earth Lusca has targeted organizations in Australia, China, Hong Kong, Mongolia, Nepal, the Philippines, Taiwan, Thailand, Vietnam, the United Arab Emirates, Nigeria, Germany, France, and the United States.
MITRE ATT&CK Techniques
T1003.001T1003.006T1007T1016T1018T1027T1027.003T1033T1036.005T1047T1049T1053.005T1057T1059.001T1059.005T1059.006T1059.007T1090T1098.004T1112T1140T1189T1190T1204.001T1204.002T1210T1218.005T1482T1543.003T1547.012T1548.002T1560.001T1566.002T1567.002T1574.001T1583.001T1583.004T1583.006T1584.004T1584.006T1588.001T1588.002T1595.002T1608.001
Associated Malware
Cobalt StrikeMimikatzNBTscanNltestPowerSploitShadowPadTasklistWinnti for Linuxcertutil
No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.