Tick
No sourced public emblem in this profile.
reference profile · reported nexus: CN (not nationality)
Tick is a cyber espionage group with likely Chinese origins that has been active since at least 2008. The group appears to have close ties to the Chinese National University of Defense and Technology, which is possibly linked to the PLA. This threat actor targets organizations in the critical infrastructure, heavy industry, manufacturing, and international relations sectors for espionage purposes. The attacks appear to be centered on political, media, and engineering sectors. STALKER PANDA has been observed conducting targeted attacks against Japan, Taiwan, Hong Kong, and the United States.
Source-reported aliases: Nian, BRONZE BUTLER, REDBALDKNIGHT, STALKER PANDA, G0060, Stalker Taurus, PLA Unit 61419, Swirl Typhoon, TEMP.Tick, TICK CASTLE. Associations do not prove equivalence.
Target geography
Catalog-listed countries (associations, not attack counts): 
Japan · 
China · 
South Korea · 
Russia
No bound claim-post feed for this label.
Historical casebook
No dated record curated yet; absence does not establish inactivity.
Planned Kinwilder coverage
Tentative editorial review windows, contingent on evidence and review; not promised publication dates or predictions of attacks.
No assigned review window.
References
https://www.symantec.com/connect/blogs/tick-cyberespionage-group-zeros-japan
https://www.secureworks.jp/resources/rp-bronze-butler
https://researchcenter.paloaltonetworks.com/2017/07/unit42-tick-group-continues-attacks/
https://www.cfr.org/interactive/cyber-operations/bronze-butler
https://www.secureworks.com/research/bronze-butler-targets-japanese-businesses
https://attack.mitre.org/groups/G0060/
https://www.secureworks.com/research/threat-profiles/bronze-butler
https://unit42.paloaltonetworks.com/atoms/stalkertaurus/
https://twitter.com/iiyonite/status/1384431491485155331
https://www.welivesecurity.com/2021/03/10/exchange-servers-under-siege-10-apt-groups/
https://cloud.google.com/blog/topics/threat-intelligence/updated-cyber-threat-actor-naming-system/