Earth Lusca Employs Doraemon, ShadowPad and Winnti Malware to Target Organizations in Hong Kong

The group’s primary motivation seems to be cyberespionage: the list of its victims includes high value targets in Hong Kong, COVID-19 research organizations, and the media, among others.