Earth Wendigo is a cyber espionage group first identified in May 2019, specializing in email exfiltration. The group is assessed to originate from China, with its primary motivation being intelligence gathering. This group distinguishes itself by its method of compromising webmail systems through JavaScript backdoor injection and the manipulation of email signatures for propagation, rather than typical ransomware or direct data exfiltration via network intrusion. Earth Wendigo has not been directly linked to any previously known threat actors.

Aliases del actor

APT EARTHWENDIGO

Actores similares

apt-earthwendigoactor · 1apt-earthberberokaactor · 1apt-earthhundunactor · 1apt-45actor · 2apt-c-27actor · 2apt-c-01actor · 2apt-c-12actor · 1apt-18actor · 1apt-1877teamactor · 1apt-27actor · 1