- Category
- Targeted, sponsor unknown · Targeted intrusions with no sponsor attributed.
- Origin
- Unknown
- Seen
- to 2026
- Status
- Active
- ATT&CK
- G1014 · 28 techniques
- Sources
- 3 sources carry it
- Identifier
- GINC-APT-0834 · luminousmoth
What it is
LuminousMoth is a Chinese-speaking cyber espionage group that has been active since at least October 2020. LuminousMoth has targeted high-profile organizations, including government entities, in Myanmar, the Philippines, Thailand, and other parts of Southeast Asia. Some security researchers have concluded there is a connection between LuminousMoth and Mustang Panda based on similar targeting and TTPs, as well as network infrastructure overlaps.
Tools
The tools and malware families the sources tie to it.
- Cobalt Strike
- PlugX
Sources
- MITRE ATT&CK attack.mitre.org