🇨🇳

DiceyF

APT Group Information theft and espionage ETDA ✓

Also Known As

No alias recorded

Target Countries

No target country recorded

Sectors Targeted

No targeted sector recorded

Details

Origin 🇨🇳 CN

Last Updated 11 Nov 2023

MITRE ATT&CK 5

T1078 T1082 T1095.001 T1105 T1110.003

Related Zero-Days

No zero-day CVE linked to this actor

Known Names 2 entries

Earth Berberoka Trend Micro

GamblingPuppet Trend Micro

Observed Target Countries 1

Based on ETDA data — countries highlighted in red

Southeast Asia

Description

(Trend Micro) We recently discovered a new advanced persistent threat (APT) group that we have dubbed Earth Berberoka (aka GamblingPuppet). Based on our analysis, this group targets gambling websites. Our investigation has also uncovered that Earth Berberoka targets the Windows, Linux, and macOS platforms, and uses malware families that have been historically attributed to Chinese-speaking individuals.

Tools Used 7

AsyncRAT Gh0st RAT oRAT PlugX PuppetLoader QuasarRAT Trochilus RAT

Reports & References 1

https://www.trendmicro.com/en_us/research/22/d/new-apt-group-earth-berberoka-targets-gambling-websites-with-old.html

ETDA Profile

Earth Berberoka

Origin

China

First Seen 2022

Motivation

Information theft and espionage

View on ETDA APT Groups ↗