{
 "Event": {
  "uuid": "2f3f0da8-0a2d-56d3-817a-eba0777e6843",
  "info": "Earth Alux Espionage Campaign Targets ASEAN Defense Ministries",
  "date": "2025-10-15",
  "threat_level_id": "1",
  "analysis": "2",
  "distribution": "3",
  "published": false,
  "Orgc": {
   "name": "SecurityStudies.info"
  },
  "Tag": [
   {
    "name": "tlp:clear"
   },
   {
    "name": "securitystudies:status=\"curated\""
   },
   {
    "name": "securitystudies:type=\"espionage\""
   },
   {
    "name": "misp-galaxy:threat-actor=\"Earth Alux\""
   },
   {
    "name": "misp-galaxy:country=\"thailand\""
   },
   {
    "name": "misp-galaxy:country=\"philippines\""
   },
   {
    "name": "misp-galaxy:country=\"vietnam\""
   },
   {
    "name": "misp-galaxy:country=\"malaysia\""
   },
   {
    "name": "misp-galaxy:sector=\"Defense\""
   },
   {
    "name": "misp-galaxy:sector=\"Government\""
   },
   {
    "name": "misp-galaxy:sector=\"Defense Industrial Base\""
   }
  ],
  "Attribute": [
   {
    "type": "link",
    "category": "External analysis",
    "value": "https://securitystudies.info/cyber/incidents/earth-alux-espionage-campaign-targets-asean-defense-ministries/",
    "comment": "SecurityStudies.info entry",
    "to_ids": false
   },
   {
    "type": "link",
    "category": "External analysis",
    "value": {
     "title": "Trend Micro Research",
     "url": "https://www.trendmicro.com/en_us/research.html"
    },
    "comment": "source",
    "to_ids": false
   },
   {
    "type": "text",
    "category": "Other",
    "value": "Trend Micro researchers disclosed an ongoing espionage campaign by Earth Alux (China-linked) targeting defense ministries and military contractors across Thailand, Philippines, Vietnam, and Malaysia. The group deployed VARGEIT and COBEACON implants via trojanized military procurement documents. The campaign has been active since at least Q4 2025, with lateral movement into classified networks confirmed at two ASEAN defense organizations.",
    "comment": "summary",
    "to_ids": false
   }
  ]
 }
}