Earth Alux

Description

(Trend Micro) The Earth Alux APT group’s schemes and tactics have been uncloaked through our relentless monitoring and investigation efforts. The China-linked intrusion set is actively launching cyberespionage attacks against the government, technology, logistics, manufacturing, telecommunications, IT services, and retail sectors.

The first sighting of its activity was in the second quarter of 2023; back then, it was predominantly observed in the APAC region. Around the middle of 2024, it was also spotted in Latin America.

Earth Alux has also been observed to conduct regular tests for some of its toolsets to ensure stealth and longevity in the target environment.

Names

NameName-Giver
Earth AluxTrend Micro

Country

Motivation

  • Information theft and espionage

First Seen

2023

Observed Sectors

Observed Countries

Tools

Information

Other Information

Uuid

a56a0330-c9ef-4365-8279-fe082dfc20e3

Last Card Change

2025-04-21