Earth Berberoka
No sourced public emblem in this profile.
reference profile · reported nexus: CN (not nationality)
According to TrendMicro, Earth Berberoka is a threat group originating from China that mainly focuses on targeting gambling websites. This group's campaign uses multiple malware families that target the Windows, Linux, and macOS platforms that have been attributed to Chinese-speaking actors. Aside from using tried-and-tested malware families that have been upgraded, such as PlugX and Gh0st RAT, Earth Berberoka has also developed a brand-new complex, multistage malware family, which has been dubbed PuppetLoader.
Source-reported aliases: GamblingPuppet. Associations do not prove equivalence.
Target geography
Catalog-listed countries (associations, not attack counts): 
China · 
United States of America · 
Hong Kong · 
Malaysia · 
Taiwan
No bound claim-post feed for this label.
Historical casebook
No dated record curated yet; absence does not establish inactivity.
Planned Kinwilder coverage
Tentative editorial review windows, contingent on evidence and review; not promised publication dates or predictions of attacks.
No assigned review window.
References
https://documents.trendmicro.com/assets/white_papers/wp-operation-earth-berberoka.pdf
https://documents.trendmicro.com/assets/txt/earth-berberoka-windows-iocs-2.txt
https://documents.trendmicro.com/assets/txt/earth-berberoka-linux-iocs-2.txt
https://documents.trendmicro.com/assets/txt/earth-berberoka-macos-iocs-2.txt
https://documents.trendmicro.com/assets/txt/earth-berberoka-domains-2.txt
https://www.youtube.com/watch?v=QXGO4RJaUPQ
https://www.botconf.eu/wp-content/uploads/2022/05/Botconf2022-40-LunghiHorejsi.pdf