Earth Lusca
Earth Lusca is a threat actor that targets organizations of interest to the Chinese government, including academic institutions, telecommunication companies, religious organizations, and other civil society groups. Earth Lusca's tools closely resemble those used by Winnti Umbrella, but the group appears to operate separately from Winnti. Earth Lusca has also been observed targeting cryptocurrency payment platforms and cryptocurrency exchanges in what are likely financially motivated attacks. 
Suspected victims
  • Academic institutions, government research organizations, religious groups, cryptocurrency exchanges, and other financial and civil society organizations.
Suspected state sponsor
  • China
Type of incident
  • Espionage
Target category
  • Government
  • Civil society
  • Private sector