Earth Krahang — APT Profile
Earth Krahang is an extremely prolific Chinese APT targeting foreign government email systems across approximately 116 countries.Tools & malware
- BadPotato Tool
- Cobalt Strike Framework
- DinodasRAT Backdoor
- nuclei Tool
- PlugX RAT
- RESHELL Backdoor
- ShadowPad Backdoor
- SoftEther VPN Tool
- sqlmap Tool
- XDealer Backdoor
Vendor research
- Earth Krahang Exploits Intergovernmental Trust to Launch Cross-Government Attacks Trend Micro
- China-linked hackers target governments and more in Southeast Asia with new backdoors Recorded Future News (The Record)
- Chinese Earth Krahang hackers breach 70 orgs in 23 countries BleepingComputer
- Earth Krahang APT breached tens of government orgs worldwide Security Affairs
- DinodasRAT Linux implant targeting entities worldwide Securelist (Kaspersky)