ClassicBrechasMapaActoresTTP MatrixAnaliticaAlertasCyberNewsArsenalExploitsKillChainOrigenSSLBLRansomLookRansomwhere
Earth Lusca
1 incidentes
1 paises
1 sectores
apt CN Ultimo: 2026-05-25
Aliases: AQUATIC PANDA, BRONZE UNIVERSITY, BountyGlad, CHROMIUM, Charcoal Typhoon, ControlX, FISHMONGER, Red Dev 10, Red Scylla, RedHotel, TAG-22
Earth Lusca, also known by aliases such as Aquatic Panda and Charcoal Typhoon, is a highly adaptive and persistent cyber espionage group linked to China. First observed in April 2019, the group has evolved its operational methods, distinguishing itself through a dual motivation: conducting cyberespionage activities for the Chinese state and pursuing financial gain through attacks on gambling and cryptocurrency entities. This blend of state-sponsored intelligence collection and financially driven operations sets Earth Lusca apart, suggesting a well-resourced group with diverse objectives. The group is known for its stealth and multi-phase attacks, often overlapping with the tooling and tradecraft of other Chinese threat groups like APT41 and Winnti, yet maintaining its own distinct infrastructure and operational independence.