ETDA สำนักงานพัฒนาธุรกรรมทางอิเล็กทรอนิกส์
Electronic Transactions Development Agency
Home > List all groups > Earth Berberoka

Threat Group Cards: A Threat Actor Encyclopedia

Permanent link APT group: Earth Berberoka

NamesEarth Berberoka (Trend Micro)
GamblingPuppet (Trend Micro)
CountryChina China
MotivationInformation theft and espionage
First seen2022
Description(Trend Micro) We recently discovered a new advanced persistent threat (APT) group that we have dubbed Earth Berberoka (aka GamblingPuppet). Based on our analysis, this group targets gambling websites. Our investigation has also uncovered that Earth Berberoka targets the Windows, Linux, and macOS platforms, and uses malware families that have been historically attributed to Chinese-speaking individuals.
ObservedSectors: Casinos and Gambling.
Countries: Southeast Asia.
Tools usedAsyncRAT, Gh0st RAT, oRAT, PlugX, PuppetLoader, QuasarRAT, Trochilus RAT.

Last change to this card: 03 May 2022

Download this actor card in PDF or JSON format

Previous: Dust Storm
Next: Earth Lusca

Digital Service Security Center
Electronic Transactions Development Agency

Follow us on

Facebook Twitter

Report incidents

Telephone +66 (0)2-123-1227
E-mail [email protected]