BRONZE WALKER

BRONZE WALKER has been active since at least 2012 and has targeted government, military, critical infrastructure, and manufacturing organizations. The threat group leverages the Superman remote access trojan. CTU researchers assess with moderate confidence that the group operates on behalf of China.