Skip to content
Nation-state APTEspionageAdvanced sophistication · State-backed

Earth Lusca

Earth Lusca is a China-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets 17 sectors, including Government and Technology, in 57 countries, including the United States and the United Kingdom. It uses 93 MITRE ATT&CK techniques and exploits 37 known CVEs.

Also known as
  • TAG-22
  • Charcoal Typhoon
  • CHROMIUM
  • ControlX
Origin
China
Techniques
93
Exploited CVEs
37
First seen
Jan 1, 2019
Last seen
Aug 8, 2023
Record updated

Who They Target.

Labelsespionage

About Earth Lusca.

Earth Lusca is a suspected China-based cyber espionage group that has been active since at least April 2019. Earth Lusca has targeted organizations in Australia, China, Hong Kong, Mongolia, Nepal, the Philippines, Taiwan, Thailand, Vietnam, the United Arab Emirates, Nigeria, Germany, France, and the United States.

Last updated Sep 19, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.