Cyber threats / Threat actors

Earth Berberoka

CN Suspected sponsor: China
4
APAC targets
0
Techniques
0
Incidents
0
News · 30d
Profile
Also known as: GamblingPuppet

According to TrendMicro, Earth Berberoka is a threat group originating from China that mainly focuses on targeting gambling websites. This group's campaign uses multiple malware families that target the Windows, Linux, and macOS platforms that have been attributed to Chinese-speaking actors. Aside from using tried-and-tested malware families that have been upgraded, such as PlugX and Gh0st RAT, Earth Berberoka has also developed a brand-new complex, multistage malware family, which has been dubbed PuppetLoader.

Related profiles: DiceyF

Profiles whose description names this actor, that this description names, or that share one of its names. The sources mention them together; they are not necessarily the same group.

ATT&CK techniques
MITRE ATT&CK has no technique mapping for this actor.
Incidents attributed
  • No incident in the register is attributed to this actor.
In the news
  • No Asia-Pacific article names this actor yet.
Targets
Elsewhere: United States
Sectors: Education, Electronics Manufacturers, Gambling Websites, Information technology
Relevance to the EU
EU relevance: Medium
Targets education in China, where the EU has Education & Skills projects; 9 more such overlaps
23 EU cooperation projects in the Asia-Pacific countries this actor targets:
Trade & Investment
8
Development Cooperation
3
Infrastructure & Transport
2
Governance & Rule of Law
2
Education & Skills
2
Digital & ICT
2
Peace & Security
1
Research & Innovation
1
Threats to the EU →
References
Sources: MISP