Threat Group Cards: A Threat Actor Encyclopedia

APT group: Earth Berberoka

Names	Earth Berberoka (Trend Micro) GamblingPuppet (Trend Micro)
Country	China
Motivation	Information theft and espionage
First seen	2022
Description	(Trend Micro) We recently discovered a new advanced persistent threat (APT) group that we have dubbed Earth Berberoka (aka GamblingPuppet). Based on our analysis, this group targets gambling websites. Our investigation has also uncovered that Earth Berberoka targets the Windows, Linux, and macOS platforms, and uses malware families that have been historically attributed to Chinese-speaking individuals.
Observed	Sectors: Casinos and Gambling. Countries: Southeast Asia.
Tools used	AsyncRAT, Gh0st RAT, oRAT, PlugX, PuppetLoader, QuasarRAT, Trochilus RAT.
Information	<https://www.trendmicro.com/en_us/research/22/d/new-apt-group-earth-berberoka-targets-gambling-websites-with-old.html>

Last change to this card: 03 May 2022

Download this actor card in PDF or JSON format