| SYMBOL | COMMON_NAME | aka. SYNONYMS |
According to TrendMicro, Earth Berberoka is a threat group originating from China that mainly focuses on targeting gambling websites. This group's campaign uses multiple malware families that target the Windows, Linux, and macOS platforms that have been attributed to Chinese-speaking actors. Aside from using tried-and-tested malware families that have been upgraded, such as PlugX and Gh0st RAT, Earth Berberoka has also developed a brand-new complex, multistage malware family, which has been dubbed PuppetLoader.
| 2022-08-12 ⋅ Trend Micro ⋅ Iron Tiger Compromises Chat Application Mimi, Targets Windows, Mac, and Linux Users Rshell HyperBro |
| 2022-05-23 ⋅ Trend Micro ⋅ Operation Earth Berberoka reptile oRAT Ghost RAT PlugX pupy Earth Berberoka |
| 2022-05-07 ⋅ YouTube (botconf eu) ⋅ Operation Gamblingpuppet: Analysis Of A Multiplatform Campaign Targeting Online Gambling Customers Earth Berberoka |
| 2022-04-27 ⋅ Trend Micro ⋅ New APT Group Earth Berberoka Targets Gambling Websites With Old and New Malware HelloBot AsyncRAT Ghost RAT HelloBot PlugX Quasar RAT Earth Berberoka |
| 2022-04-27 ⋅ Trendmicro ⋅ IOCs for Earth Berberoka - Windows AsyncRAT Cobalt Strike PlugX Quasar RAT Earth Berberoka |
| 2022-04-27 ⋅ Trendmicro ⋅ IOCs for Earth Berberoka - MacOS oRAT Earth Berberoka |
| 2022-04-27 ⋅ Trendmicro ⋅ IOCs for Earth Berberoka Earth Berberoka |
| 2022-04-27 ⋅ Trendmicro ⋅ IOCs for Earth Berberoka - Linux Rekoobe pupy Earth Berberoka |
| 2022-04-27 ⋅ Trendmicro ⋅ Operation Gambling Puppet reptile oRAT AsyncRAT Cobalt Strike DCRat Ghost RAT PlugX Quasar RAT Trochilus RAT Earth Berberoka |