KINWILDER

BRONZE HIGHLAND

No sourced public emblem in this profile.

reference profile · reported nexus: CN (not nationality)

BRONZE HIGHLAND has been observed using spearphishing as an initial infection vector to deploy the MgBot remote access trojan against targets in Hong Kong. Third party reporting suggests the threat group also targets India, Malaysia and Taiwan and leverages Cobalt Strike and KsRemote Android Rat. CTU researchers assess with moderate confidence that BRONZE HIGHLAND operates on behalf of China and has a remit covering espionage against domestic human rights and pro-democracy advocates and nations neighbouring China

Source-reported aliases: Evasive Panda, Daggerfly. Associations do not prove equivalence.

Target geography

Catalog-listed countries (associations, not attack counts): Hong Kong · Malaysia · India · Taiwan · Nigeria

No bound claim-post feed for this label.

Historical casebook

No dated record curated yet; absence does not establish inactivity.

Planned Kinwilder coverage

Tentative editorial review windows, contingent on evidence and review; not promised publication dates or predictions of attacks.

No assigned review window.

References

Pinned source catalog

https://blog.malwarebytes.com/threat-analysis/2020/07/chinese-apt-group-targets-india-and-hong-kong-using-new-variant-of-mgbot-malware

https://vb2020.vblocalhost.com/uploads/VB2020-43.pdf

https://www.youtube.com/watch?v=LeKi0KfzOow&list=PLffioUnqXWkdzWcZXH-bzPVgcs2R4r7iS&index=1&t=2154s

https://www.welivesecurity.com/2023/04/26/evasive-panda-apt-group-malware-updates-popular-chinese-software/

Submission and profile-update guide · Publisher API

Editorial standard · root@kinwilder.com · RSS · Outpost