Earth Kurma

Linked to China by one source.

Reports: 3
Last reported: 17 March 2026
Known CVEs: 8
Origin: China

ID: earth-kurma
Sources: MISP ETDA Malpedia
Merge evidence: 2 alias matches

Reports per quarter

2025 Q2: 1 report
2025 Q3: no reports
2025 Q4: 1 report
2026 Q1: 1 report

Dated reports, 2025 Q2 to 2026 Q1.

CVEs named in reports

CVE-2024-40766 KEV ransomware
CVE-2025-0282 KEV ransomware
CVE-2025-10035 KEV ransomware
CVE-2025-12562
CVE-2025-49704 KEV ransomware
CVE-2025-49706 KEV ransomware
CVE-2025-5777 KEV ransomware
CVE-2025-61882 KEV ransomware

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

17 March 2026

rapid7-threat-landscape-report-2026.pdf

file creation date fromORKL

Archived copy on ORKL Detailsfor rapid7-threat-landscape-report-2026.pdf
13 November 2025

Cross-Chain TxDataHiding Crypto Heist: A Very Chainful Process (Part 3)

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Cross-Chain TxDataHiding Crypto Heist: A Very Chainful Process (Part 3)
25 April 2025

Earth Kurma APT Campaign Targets Southeast Asian Government Telecom Sectors

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Earth Kurma APT Campaign Targets Southeast Asian Government Telecom Sectors

Newest first. Details opens the report in Explore.