Earth Lusca

Earth Lusca is a suspected China-based cyber espionage group active since at least April 2019. It has targeted organizations in Australia, China, Hong Kong, Mongolia, Nepal, the Philippines, Taiwan, Thailand, Vietnam, the United Arab Emirates, Nigeria, Germany, France, and the United States, including government institutions, news media, gambling companies, educational institutions, COVID-19 research organizations, telecommunications companies, and cryptocurrency trading platforms. Security researchers suggest some operations may be financially motivated, and the group has used malware associated with other Chinese threat groups, though its techniques and infrastructure are considered distinct.