chinaBRONZE UNION
Objectives
Aliases
Tools
SUMMARY
Since 2013 BRONZE UNION has targeted organizations across a wide range of industry verticals including government, technology, manufacturing and non-governmental organizations in support of its political and military intelligence-collection objectives. CTU researchers assess with high confidence that BRONZE UNION operates on behalf of China. The group is adept at using a range of custom and openly available tools to identify and selectively exfiltrate high-value information and maintain access to sensitive systems over a long period of time. BRONZE UNION maintains a high degree of operational flexibility in order to adapt to the environments it operates in, using tools such as Sysupdate, PlugX, HttpBrowser and webshells including China Chopper, OwaAuth and a variant of ASPXSpy.
Threat Analysis
A Peek into BRONZE UNION’s ToolboxThreat Analysis
BRONZE UNION Cyberespionage Persists Despite DisclosuresThreat Analysis
Threat Group 3390 CyberespionageContact Us
Contact us directly whether your organization needs immediate assistance or you want to discuss your incident readiness, response, and testing needs.