Threat actor
Earth Lusca
Tracked by CyberSIXT since Jun 16, 2026 · last activity Jun 21, 2026
Linked incidents
Coverage timeline
-
Security Affairs flags 1.2M site supply chain breachsecurityaffairs.com · Jun 21, 2026
-
China-Linked FishMonger Ports SprySOCKS to Windows With Kernel-Level Stealth and UEFI Bootkit Hintssecurityaffairs.com · Jun 17, 2026
-
FishMonger uses new SprySOCKS backdoor with kernel driverswww.darkreading.com · Jun 16, 2026
-
SprySOCKS backdoor gains Windows kernel stealth, hits governmentswww.infosecurity-magazine.com · Jun 16, 2026