Earth Berberoka
Earth Berberoka is classified as other threat group.
- Malware families
- 2
- Origin
- China
- Also known as
- 1
According to TrendMicro, Earth Berberoka is a threat group originating from China that mainly focuses on targeting gambling websites. This group's campaign uses multiple malware families that target the Windows, Linux, and macOS platforms that have been attributed to Chinese-speaking actors. Aside from using tried-and-tested malware families that have been upgraded, such as PlugX and Gh0st RAT, Earth Berberoka has also developed a brand-new complex, multistage malware family, which has been dubbed PuppetLoader.
The group's reported origin is China.
The group is associated with 2 malware families.
Also known as: GamblingPuppet
The group is associated with 2 malware families.
Malware families
- HelloBot
- Rshell
Published reports on this actor:
- https://documents.trendmicro.com/assets/white_papers/wp-operation-earth-berberoka.pdf
- https://www.trendmicro.com/en_us/research/22/d/new-apt-group-earth-berberoka-targets-gambling-websites-with-old.html
- https://documents.trendmicro.com/assets/txt/earth-berberoka-windows-iocs-2.txt
Source: MISP Galaxy, Malpedia.
Is your organization mentioned?
Search with your domain to check whether your organization appears in ransomware listings, leaked records, forums and Telegram channels.
Search your domainThreat Intelligence
Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.