VERY IMPORTANT

An APT identified as DiceyF has been targeting online casinos and other victims in Southeast Asia reportedly for years now. Securelist's research shows overlap with LuckyStar PlugX, a supply chain incident privately reported. TTPs, secure messaging client abuse, malware, and targeting demonstrate that this set of activity and resources align with Earth Berberoka/GamblingPuppet activity discussed at Botconf 2022 by Trend Micro researchers, also discussed as an unknown or developing cluster by other vendors.