Threat Actor Profile

Earth Lusca

AQUATIC PANDA BountyGlad BRONZE UNIVERSITY Charcoal Typhoon CHROMIUM ControlX FISHMONGER G1006 Red Dev 10 Red Scylla RedHotel TAG-22

▲ High Threat

Perimeter Device Exploitation Campaign, Regional Diplomatic Espionage

Origin China

Sponsor People's Republic of China (PRC)

Motivation Strategic intelligence gathering, political espionage, and intellectual property theft

Target Sectors

Government Agencies Defense Contractors Telecommunications Critical Infrastructure Technology and Semiconductor Sectors Diplomatic Entities

Spear-phishing with malicious attachments

Exploitation of vulnerabilities in edge/perimeter devices

Living-off-the-land (LotL) techniques

DLL Side-loading

Custom backdoor deployment

Credential harvesting

Attacks and Vulnerabilities 2026-07-02