Earth Lusca adds multiplatform malware KTLVdoor to its arsenal
Earth Lusca adds multiplatform malware KTLVdoor to its arsenal
The Chinese-speaking threat actor Earth Lusca used the new backdoor KTLVdoor in an attack against a trading company in China.
securityaffairs.com
September 5, 2024 at 1:34 PM
Earth Lusca adds multiplatform malware KTLVdoor to its arsenal
Earth Lusca, a China-linked threat actor since 2019, targets government, media, telecom, academia, and crypto platforms using advanced tools like KTLVdoor and ShadowPad with cloud-based rotating C2 infrastructure. #China #EarthLusca #KTLVdoor
APT Profile – Earth Lusca
Earth Lusca (aka FishMonger) is a China-linked threat actor active since 2019 that conducts long‑term cyber-espionage against government, media, telecommunications, academic, and religious organizations while also running financially motivated campaigns against cryptocurrency platforms. Recent campaigns show expanded tooling and tradecraft — including the new Go-based, multi-platform backdoor KTLVdoor, extensive use of ShadowPad/Winnti toolsets, and a large, cloud-hosted, rotating C2 infrastructure to maintain stealth. #EarthLusca #KTLVdoor
www.hendryadrian.com
March 11, 2026 at 4:40 PM
Earth Lusca, a China-linked threat actor since 2019, targets government, media, telecom, academia, and crypto platforms using advanced tools like KTLVdoor and ShadowPad with cloud-based rotating C2 infrastructure. #China #EarthLusca #KTLVdoor
New Backdoor Linked to Earth Lusca Threat Group https://buff.ly/4gjD3TZ
New Backdoor Linked to Earth Lusca Threat Group
Researchers have uncovered a new backdoor called KTLVdoor, which is written in the Go language, has versions for targeting Windows and Linux and is linked back to Chinese-speaking threat actor Earth…
buff.ly
September 7, 2024 at 11:42 AM
New Backdoor Linked to Earth Lusca Threat Group https://buff.ly/4gjD3TZ
Cyber Morning Call de hoje (ep 619): novidades em backdoors da China e da Coreia do Norte e vulnerabilidades sérias em tecnologias da Zyxel e VMware. spotifyanchor-web.app.link/e/qen3yxcgCMb
619 - Grupo chinês ressurge com novo backdoor by Cyber Morning Call
[Referências do Episódio]
Earth Lusca Uses KTLVdoor Backdoor for Multiplatform Intrusion - https://www.trendmicro.com/en_us/research/24/i/earth-lusca-ktlvdoor.html
Earth Lusca - https://malpedia....
spotifyanchor-web.app.link
September 4, 2024 at 11:43 AM
Cyber Morning Call de hoje (ep 619): novidades em backdoors da China e da Coreia do Norte e vulnerabilidades sérias em tecnologias da Zyxel e VMware. spotifyanchor-web.app.link/e/qen3yxcgCMb
China's 'Earth Lusca' Propagates Multiplatform Backdoor
China's 'Earth Lusca' Propagates Multiplatform Backdoor
The malware, KTLVdoor, has already been found on more than 50 command-and-control servers and enables full control of any environment it compromises.
www.darkreading.com
September 5, 2024 at 9:03 PM
China's 'Earth Lusca' Propagates Multiplatform Backdoor
New Cross-Platform Malware KTLVdoor Discovered in Attack on Chinese Trading Firm
New Cross-Platform Malware KTLVdoor Discovered in Attack on Chinese Trading Firm
New cross-platform malware KTLVdoor targets Chinese trading firm, using Alibaba servers. Earth Lusca linked to attack.
thehackernews.com
September 5, 2024 at 6:28 AM
New Cross-Platform Malware KTLVdoor Discovered in Attack on Chinese Trading Firm
New Cross-Platform Malware KTLVdoor Discovered in Attack on Chinese Trading Firm
thehackernews.com/2024/09/new-...
#Infosec #Security #Cybersecurity #CeptBiro #CrossPlatformMalware #KTLVdoor #ChineseTradingFirm
thehackernews.com/2024/09/new-...
#Infosec #Security #Cybersecurity #CeptBiro #CrossPlatformMalware #KTLVdoor #ChineseTradingFirm
New Cross-Platform Malware KTLVdoor Discovered in Attack on Chinese Trading Firm
New cross-platform malware KTLVdoor targets Chinese trading firm, using Alibaba servers. Earth Lusca linked to attack.
thehackernews.com
September 5, 2024 at 1:10 PM
New Cross-Platform Malware KTLVdoor Discovered in Attack on Chinese Trading Firm
thehackernews.com/2024/09/new-...
#Infosec #Security #Cybersecurity #CeptBiro #CrossPlatformMalware #KTLVdoor #ChineseTradingFirm
thehackernews.com/2024/09/new-...
#Infosec #Security #Cybersecurity #CeptBiro #CrossPlatformMalware #KTLVdoor #ChineseTradingFirm
Earth Lusca Uses KTLVdoor Backdoor for Multiplatform Intrusion https://groups.googl... #malware
September 6, 2024 at 9:44 PM
Earth Lusca Uses KTLVdoor Backdoor for Multiplatform Intrusion https://groups.googl... #malware
Earth Lusca Uses KTLVdoor Backdoor for Multiplatform Intrusion https://buff.ly/3AKegba
Earth Lusca Uses KTLVdoor Backdoor for Multiplatform Intrusion
Business
buff.ly
September 10, 2024 at 4:12 PM
Earth Lusca Uses KTLVdoor Backdoor for Multiplatform Intrusion https://buff.ly/3AKegba
New Cross-Platform Malware KTLVdoor Discovered in Attack on Chinese Trading Firm https://buff.ly/4cWnDlF
New Cross-Platform Malware KTLVdoor Discovered in Attack on Chinese Trading Firm
New cross-platform malware KTLVdoor targets Chinese trading firm, using Alibaba servers. Earth Lusca linked to attack.
buff.ly
September 10, 2024 at 11:42 AM
New Cross-Platform Malware KTLVdoor Discovered in Attack on Chinese Trading Firm https://buff.ly/4cWnDlF
Earth Lusca adds multiplatform malware KTLVdoor to its arsenal https://buff.ly/3XeLaZh
Earth Lusca adds multiplatform malware KTLVdoor to its arsenal
The Chinese-speaking threat actor Earth Lusca used the new backdoor KTLVdoor in an attack against a trading company in China.
buff.ly
September 8, 2024 at 8:12 PM
Earth Lusca adds multiplatform malware KTLVdoor to its arsenal https://buff.ly/3XeLaZh
Read more about the latest research I did with my talented colleague Jaromir ! We exposed a previously unreported and new malware family we named KTLVdoor, used by Chinese-speaking threat actors including #EarthLusca - More than 50 C2s ! #cyberespionage - www.trendmicro.com/en_us/resear...
September 4, 2024 at 8:05 AM
Read more about the latest research I did with my talented colleague Jaromir ! We exposed a previously unreported and new malware family we named KTLVdoor, used by Chinese-speaking threat actors including #EarthLusca - More than 50 C2s ! #cyberespionage - www.trendmicro.com/en_us/resear...
Read more about the latest research I did with my talented colleague Jaromir ! We exposed a previously unreported and new malware family we named KTLVdoor, used by Chinese-speaking threat actors including #EarthLusca - More than 50 C2s ! #potatoespionage - www.trendmicro.com/en_us/resear...
September 4, 2024 at 8:58 AM
Read more about the latest research I did with my talented colleague Jaromir ! We exposed a previously unreported and new malware family we named KTLVdoor, used by Chinese-speaking threat actors including #EarthLusca - More than 50 C2s ! #potatoespionage - www.trendmicro.com/en_us/resear...
New Cross-Platform Malware KTLVdoor Discovered in Attack on Chinese Trading Firm #cybersecurity #infosec #privacy #news thehackernews.com/20...
September 5, 2024 at 5:08 PM
New Cross-Platform Malware KTLVdoor Discovered in Attack on Chinese Trading Firm #cybersecurity #infosec #privacy #news thehackernews.com/20...
Earth Lusca's KTLVdoor malware targets Windows & #Linux, enabling file manipulation and remote scanning via 50+ command-and-control servers, likely shared with other threat actors.
thehackernews.com/2024/09/new-...
#Cybersecurity #Malware
thehackernews.com/2024/09/new-...
#Cybersecurity #Malware
New Cross-Platform Malware KTLVdoor Discovered in Attack on Chinese Trading Firm
New cross-platform malware KTLVdoor targets Chinese trading firm, using Alibaba servers. Earth Lusca linked to attack.
thehackernews.com
September 5, 2024 at 3:24 PM
Earth Lusca's KTLVdoor malware targets Windows & #Linux, enabling file manipulation and remote scanning via 50+ command-and-control servers, likely shared with other threat actors.
thehackernews.com/2024/09/new-...
#Cybersecurity #Malware
thehackernews.com/2024/09/new-...
#Cybersecurity #Malware
In through the back door...
"During our monitoring of the Chinese-speaking threat actor Earth Lusca, we discovered a new multiplatform backdoor written in Golang, named KTLVdoor, which has both Microsoft Windows and Linux versions."
"During our monitoring of the Chinese-speaking threat actor Earth Lusca, we discovered a new multiplatform backdoor written in Golang, named KTLVdoor, which has both Microsoft Windows and Linux versions."
Earth Lusca Uses KTLVdoor Backdoor for Multiplatform Intrusion
Business
buff.ly
September 7, 2024 at 10:00 AM
In through the back door...
"During our monitoring of the Chinese-speaking threat actor Earth Lusca, we discovered a new multiplatform backdoor written in Golang, named KTLVdoor, which has both Microsoft Windows and Linux versions."
"During our monitoring of the Chinese-speaking threat actor Earth Lusca, we discovered a new multiplatform backdoor written in Golang, named KTLVdoor, which has both Microsoft Windows and Linux versions."
New Cross-Platform Malware KTLVdoor Discovered in Attack on Chinese Trading Firm
#thehackersnews
#thehackersnews
New Cross-Platform Malware KTLVdoor Discovered in Attack on Chinese Trading Firm
New cross-platform malware KTLVdoor targets Chinese trading firm, using Alibaba servers. Earth Lusca linked to attack.
thehackernews.com
September 5, 2024 at 6:10 AM
New Cross-Platform Malware KTLVdoor Discovered in Attack on Chinese Trading Firm
#thehackersnews
#thehackersnews