Earth LamiaThreat actor
- unc5454
Earth Lamia is a China-nexus APT that targets organizations across multiple sectors, including finance, logistics, and government, primarily in Latin America, the Middle East, and Southeast Asia. The actor exploits web application vulnerabilities, such as CVE-2025-55182, and employs techniques like SQL injection, DLL sideloading, and the deployment of custom backdoors like PULSEPACK and…From MISP Galaxy
Last reported 2 months ago, by Infosecurity Magazine1 report
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
1 report, newest first · the exact sentence from each-
China-Linked Threat Actors Weaponize New Vulnerabilities in Under a Day“While multiple threat actors leveraged React2Shell in the wild, Vault Panda (UNC6588) and Genesis Panda (REF0657, Earth Lamia) were particularly fast in deploying various malicious tools against victims, including remote access trojans (RATs).”
Thanks — we review every report.