Threat Investigation
Request a demo
State-sponsored

Earth Lusca

Earth Lusca is classified as state-sponsored.

Malware families
10
Origin
China
Also known as
11

Earth Lusca is a threat actor from China that targets organizations of interest to the Chinese government, including academic institutions, telecommunication companies, religious organizations, and other civil society groups. Earth Lusca's tools closely resemble those used by Winnti Umbrella, but the group appears to operate separately from Winnti. Earth Lusca has also been observed targeting cryptocurrency payment platforms and cryptocurrency exchanges in what are likely financially motivated attacks.

The group's reported origin is China.

The group is associated with 10 malware families.

Also known as: CHROMIUM, ControlX, TAG-22, FISHMONGER, BRONZE UNIVERSITY, AQUATIC PANDA, Red Dev 10, RedHotel, Charcoal Typhoon, BountyGlad, Red Scylla

Threat Intelligence

Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.