Earth Krahang is a China-linked advanced persistent threat (APT) group that emerged in early 2022, primarily conducting cyber espionage against government entities globally, with a strong focus on Southeast Asia. The group is assessed with moderate confidence to be linked to the Chinese company I-Soon, suggesting a structured approach to its operations. What distinguishes Earth Krahang is its unique tactic of exploiting intergovernmental trust; it compromises government web servers and email accounts to launch subsequent attacks against other government organizations, effectively using legitimate infrastructure to enhance the credibility of its malicious activities. Although independent, Earth Krahang shares some infrastructure and methodologies with Earth Lusca, another China-nexus threat actor. The group's primary motivation is to steal sensitive information, including documents and emails, and obtain personal information of government employees.

Aliases del actor

dinodasdinodasratlinodaslinodasrat

Actores similares

earth-berberokaactor · 1earth-kapreactor · 1apt-earthberberokaactor · 1apt-earthhundunactor · 1dinodasactor · 1apt-earthwendigoactor · 1earthkapreactor · 1Earth Luscathreat-actor · 1Earth Wendigoapt · 0Earth Estriesapt · 0