What other aliases and vendor names is Earth Lusca known by?

Earth Lusca is tracked across the cybersecurity industry by multiple aliases, including: AQUATIC PANDA, BountyGlad, BRONZE UNIVERSITY, Charcoal Typhoon, CHROMIUM, ControlX, Earth Krahang, FISHMONGER.

What vulnerabilities and CVEs does Earth Lusca actively exploit?

Earth Lusca has been observed weaponizing vulnerabilities including CVE-2021-38003.

Earth Lusca

Q: What are the primary motivations and sponsors of Earth Lusca?

Earth Lusca operates from China with primary motivation categorized as Strategic intelligence gathering, political espionage, and the acquisition of sensitive government and corporate data to advance PRC geopolitical interests., sponsored or affiliated with People's Republic of China (PRC) / Ministry of State Security (MSS).

ACTIVE CAMPAIGN TRACKED ⚠ Critical Threat China

Primary Aliases: AQUATIC PANDA Charcoal Typhoon BountyGlad BRONZE UNIVERSITY

Sponsor / State Affiliation People's Republic of China (PRC) / Ministry of State Security (MSS)

Primary Motivation Strategic intelligence gathering, political espionage, and the acquisition of sensitive government and corporate data to advance PRC geopolitical interests.

Confidence Rating 95% (Grounded)

I-SOON Internal Leak Disclosure, Edge Device Zero-Day Exploitation

⚔️ Weaponized CVE Matrix (1)

CVE-2021-38003

Weaponized Vulnerability

CVSS 8.5 KEV EPSS 85.0%

🎯 Target Sectors & Focus

Government agencies Telecommunications providers Defense contractors Aviation and Aerospace Energy and Maritime infrastructure Southeast Asian diplomatic entities