Earth Wendigo
Earth Wendigo is a China-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets the Government, and Education and Research sectors in Taiwan and Hong Kong.
- Origin
- China
- Techniques
- 0
- Exploited CVEs
- No CVE data
- First seen
- Jan 1, 2019
- Record updated
Who They Target.
About Earth Wendigo.
Earth Wendigo is a threat actor from China that has been targeting several organizations, including government organizations, research institutions, and universities in Taiwan, since May 2019, aiming to exfiltrate emails from targeted organizations via the injection of JavaScript backdoors to a webmail system that is widely used in Taiwan. The threat actor also sent spear-phishing emails embedded with malicious links to multiple individuals, including politicians and activists, who support movements in Tibet, the Uyghur region, or Hong Kong.
Last updated Oct 9, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.