Threat Actor
Earth Baku
- First Reported
- Jan 23, 2025
- Latest Reported
- May 8, 2025
Reported Context (2)
- Trend Micro reported use of Rakshasa by the group to maintain access and move laterally within compromised internal networks. How to Detect IOX, FRP, and Rakshasa Proxy Infrastructure
- The article identifies Earth Baku as another name for RedGolf. TLS Certificate and JA4X Clues Link New Servers to Suspected GhostWolf Infrastructure
Malware (2)
Threat Actors (8)
MITRE ATT&CK (3)
Vendors (5)
Products (9)
Tools (5)
Countries (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.