Who is Subgroup: Earth Longzhi?

Subgroup: Earth Longzhi is a threat actor attributed to CN, also known as Earth Longzhi, SnakeCharmer. This group is tracked in the Strobes VI threat intelligence database.

What vulnerabilities does Subgroup: Earth Longzhi exploit?

Specific CVE exploitation data for Subgroup: Earth Longzhi is being tracked. Check the Strobes VI threat actor profile for updates.

Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives

PoC for every finding

30+ tools orchestrated

Book a Demo Learn More

Setup in 5 minutesSOC 2 & ISO 27001

Subgroup: Earth Longzhi

Also known as: Earth Longzhi, SnakeCharmer

CNInformation theft and espionage

Exploited CVEs

Overview

A subgroup of APT 41 . ( Trend Micro ) In early 2022, we investigated an incident that compromised a company in Taiwan. The malware used in the incident was a simple but custom Cobalt Strike loader. After further investigation, however, we found incidents targeting multiple regions using a similar Cobalt Strike loader. While analyzing code similarities and tactics, techniques, and procedures (TTPs), we discovered that the actor behind this attack has been active since 2020. After clustering each intrusion, we concluded that the threat actor is a new subgroup of advanced persistent threat (APT) group APT41 that we call Earth Longzhi.

Exploited Vulnerabilities

No exploited CVEs have been attributed to this threat actor yet.

Browse CVE Database