Cyber threats / Threat actors

BRONZE HIGHLAND

CN Suspected sponsor: China · ATT&CK G1034
5
APAC targets
17
Techniques
0
Incidents
0
News · 30d
Profile
Also known as: Daggerfly, Evasive Panda

BRONZE HIGHLAND has been observed using spearphishing as an initial infection vector to deploy the MgBot remote access trojan against targets in Hong Kong. Third party reporting suggests the threat group also targets India, Malaysia and Taiwan and leverages Cobalt Strike and KsRemote Android Rat. CTU researchers assess with moderate confidence that BRONZE HIGHLAND operates on behalf of China and has a remit covering espionage against domestic human rights and pro-democracy advocates and nations neighbouring China

Related profiles: Evasive Panda

Profiles whose description names this actor, that this description names, or that share one of its names. The sources mention them together; they are not necessarily the same group.

ATT&CK techniques · 17
Resource Development
Initial Access
Execution
Persistence
Stealth
Defense Impairment
Credential Access
Discovery
Command and Control
Incidents attributed
  • No incident in the register is attributed to this actor.
In the news
  • No Asia-Pacific article names this actor yet.
Targets
Elsewhere: Nigeria
Relevance to the EU
EU relevance: Medium
Targets 5 Asia-Pacific countries with EU cooperation projects
26 EU cooperation projects in the Asia-Pacific countries this actor targets:
Trade & Investment
7
Infrastructure & Transport
4
Development Cooperation
4
Governance & Rule of Law
2
Education & Skills
2
Digital & ICT
2
Climate & Environment
2
Peace & Security
1
Threats to the EU →
References
Sources: MISP, MITRE