Earth Longzhi

Reports per quarter

CVEs named in reports

• CVE-2017-3506 KEV
• CVE-2018-5713
• CVE-2019-16098
• CVE-2020-12641 KEV
• CVE-2020-35730 KEV
• CVE-2021-21551 KEV
• CVE-2021-26855 KEV ransomware
• CVE-2021-26857 KEV ransomware
• CVE-2021-27065 KEV ransomware
• CVE-2021-44026 KEV
• CVE-2021-44228 KEV ransomware
• CVE-2021-45105

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

1. 6 April 2026

   APT and financial attacks on industrial organizations in H1 2023 | Kaspersky ICS CERT EN

   date ORKL added it fromORKL

   Archived copy on ORKL Detailsfor APT and financial attacks on industrial organizations in H1 2023 | Kaspersky ICS CERT EN

2. 6 April 2026

   MimiKatz (Malware Family)

   date ORKL added it fromORKL

   The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor MimiKatz (Malware Family)

3. 14 June 2023

   Picus Cyber Threat Intelligence Report May 2023: Top 10 MITRE ATT&CK Techniques

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Picus Cyber Threat Intelligence Report May 2023: Top 10 MITRE ATT&CK Techniques

4. 2 May 2023

   Attack on Security Titans: Earth Longzhi Returns With New Tricks

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Attack on Security Titans: Earth Longzhi Returns With New Tricks

5. 2 May 2023

   Attack on Security Titans- Earth Longzhi Returns With New Tricks

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Attack on Security Titans- Earth Longzhi Returns With New Tricks

6. 24 March 2023

   APT attacks on industrial organizations in H2 2022 | Kaspersky ICS CERT EN

   Malpedia library date Kaspersky fromORKLCCS '25 data

   Archived copy on ORKL Detailsfor APT attacks on industrial organizations in H2 2022 | Kaspersky ICS CERT EN

7. 7 March 2023

   Using Memory Analysis to Detect EDR-Nullifying Malware

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Using Memory Analysis to Detect EDR-Nullifying Malware

8. 9 November 2022

   Hack the Real Box: APT41’s New Subgroup Earth Longzhi

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Hack the Real Box: APT41’s New Subgroup Earth Longzhi

Newest first. Details opens the report in Explore.