FishMonger the Espionage Group Behind Operation FishMedley

Red | Attack Report
Download PDF

In a shadowy game of cyber espionage, the elusive group FishMonger, also known as Earth Lusca, launched Operation FishMedley in January 2022, striking governments, NGOs, and think tanks across Asia, Europe, and the United States. Believed to be operated by the Chinese contractor I-SOON, FishMonger is armed with sophisticated malware, allowing the attackers to move stealthily, exploit credentials, and infiltrate networks with chilling precision.