China-Linked Earth Alux Uses Vargeit and Cobeacon in Cyber Attacks

Cybersecurity researchers have identified a new China-linked threat actor named Earth Alux, active since the second quarter of 2023. This group targets various key sectors such as government, technology, logistics, manufacturing, telecommunications, IT services, and retail in the Asia-Pacific (APAC) and Latin America (LATAM) regions. Earth Alux employs the tools Vargeit and Cobeacon in its multi-stage intrusions.