

This research article investigates the cyberespionage operations of the threat actor Earth Lusca, originating from China. It explores their tactics, techniques, and procedures (TTPs), infrastructure, and targeted sectors, including government, education, and cryptocurrency. The study highlights the complexities of attributing cyber activities to specific actors and provides insights into the evolving landscape of cyber threats.