Earth Berberoka, also known as GamblingPuppet, is an advanced persistent threat (APT) group formally identified in April 2022, with observed activity dating back to at least December 2020. The group is assessed with high confidence to be comprised of Chinese-speaking individuals. Their primary motivation is cyber espionage and intellectual property theft, rather than direct financial gain. What sets Earth Berberoka apart is its multi-platform targeting capabilities, impacting Windows, Linux, and macOS systems, and its unique blend of using both upgraded, decades-old malware families alongside newly developed custom tools. The group specifically focuses its campaigns on the online gambling industry, particularly in Southeast Asia, but has also broadened its targeting to include government, IT services, and electronics manufacturing sectors. The group has also been noted for overlapping activity with the threat actor DiceyF.

Aliases del actor

GamblingPuppetAPT EARTHBERBEROKAChinese gambling websitesdos empresas de servicios ITuna empresa de fabricación electrónica

Actores similares

apt-earthberberokaactor · 1apt-earthhundunactor · 1apt-earthwendigoactor · 1apt-45actor · 2apt-c-27actor · 2apt-c-01actor · 2apt-c-12actor · 1apt-18actor · 1apt-1877teamactor · 1apt-27actor · 1