Threat actor
Earth Estries
Tracked by CyberSIXT since 27 Oct 2025
- Articles · all time
- 1
- Articles · last 30 days
- 0
- CVEs exploited · attributed · all time
- 0
- Research reports · all time
- 2
11 articles from 6 outlets since 9 Sep 2025; the latest 38 days ago.
- Article
- Research report
Show as table
Who reported 6 outlets
- SecurityOnline4
- The Hacker News3
- GBHackers1
- SecurityWeek1
- Infosecurity1
- Dark Reading1
Names and sources
- Earth Estries
- Named by CyberSIXT coverage
- Earth Estries
- Named by Malpedia · earth_estries
- Earth Estries
- Named by MISP Galaxy · 1f7f4a51-c4a8-4365-ade3-83b222e7cb67
- 1f7f4a51-c4a8-4365-ade3-83b222e7cb67
- Named by CyberSIXT coverage
Malware and tools
- Chinese Hackers Target Latin American Governments With New MalwareDark Reading
- China-Linked Hackers Target Latin America With SparroWocky BackdoorInfosecurity
- Salt Typhoon hits Azerbaijani energy firm via Exchange exploitSecurityWeek
- Chinese hackers hit Azerbaijan energy firm with multi wave attackThe Hacker News
- China-Linked UAT-8302 Targets Governments Using Shared APT Malware Across RegionsThe Hacker News
- Phantom in the Machine: Inside Salt Typhoon’s “SnappyBee” BackdoorSecurityOnline
- China-Aligned APTs Launch “Premier Pass-as-a-Service,” Sharing Access in Coordinated Global EspionageSecurityOnline
- Symantec Exposes Chinese APT Overlap: Zingdoor, ShadowPad, and KrustyLoader Used in Global EspionageSecurityOnline
- New Salt Typhoon Attacks Leverage Zero-Days and DLL SideloadingGBHackers
- Unmasking Salt Typhoon: A Report Exposes 45 New Domains from a Chinese APT GroupSecurityOnline
- 45 Previously Unreported Domains Expose Longstanding Salt Typhoon Cyber EspionageThe Hacker News · first in our coverage