Earth Longzhi (SnakeCharmer) is an APT41 subgroup using IFEO-based stack rumbling to disable security software.
Earth Longzhi (SnakeCharmer) is a subgroup of APT41 targeting organizations in Taiwan, Thailand, the Philippines, and Fiji. Their primary TTP includes ‘stack rumbling’ via Image File Execution Options (IFEO), a novel denial-of-service (DoS) technique used to disable security software. Defenders should monitor for suspicious IFEO registry entries and unexpected disabling of security solutions.
Earth Longzhi is a subgroup of APT41 targeting organizations based in Taiwan, Thailand, the Philippines, and Fiji, and using “stack rumbling” via Image File Execution Options (IFEO), a new denial-of-service (DoS) technique to disable security software.
Earth Longzhi targets organizations in Taiwan, Thailand, the Philippines, and Fiji.
Earth Longzhi uses a novel denial-of-service (DoS) technique called 'stack rumbling' via Image File Execution Options (IFEO).
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.