Earth Estries is a China-linked cyber espionage group that has been active since at least 2020, with operations becoming notably more aggressive from 2023. Their primary motivation is long-term intelligence gathering, aligning with Chinese geopolitical priorities. The group is distinguished by its sophisticated use of custom malware, exploitation of publicly exposed server vulnerabilities, and a heavy reliance on living-off-the-land techniques within compromised networks. A unique operational characteristic is their practice of regularly cleaning existing backdoors and redeploying new malware after each operation to minimize detection. Earth Estries operates under several aliases, including Salt Typhoon, FamousSparrow, GhostEmperor, UNC2286, RedMike, and UNC5807, and has also been noted for collaborative tactics with other China-aligned groups like Earth Naga, sometimes acting as an access broker.

Aliases del actor

famoussparrowkeyboypirate pandatropic trooperusbferry

Actores similares

pirate-pandaactor · 1Pirate Pandaapt · 0Aquatic Pandaactor · 1Mustang Pandaapt · 1APT27 (Emissary Panda)actor · 1Putter Pandaapt · 1Deep Pandaactor · 1anchor-pandaactor · 1aquatic-pandaactor · 1big-pandaactor · 1