Skip to Content
China icon
China

BRONZE BUTLER

ObjectivesEspionage
AliasesCTG-2006 (SCWX CTU), Daserf, Stalker Panda (CrowdStrike), Swirl Typhoon (Microsoft), Tick (Palo Alto)
ToolsABK, BBK, Casper, Daserf, Datper, DGet, down_new, Ghostdown, Gofarer, gsecdump, Mimikatz, MSGet, Netboy, RarStar, Screen Capture Tool, ShadowPad, ShadowPy, T-SMB, Windows Credential Editor, WinRAR, xmm downloader, xxmm

Summary

BRONZE BUTLER (also known as Tick) is a threat group that CTU researchers assess with moderate confidence operates on behalf of China. The group has been observed by CTU researchers targeting networks in East Asia, primarily Japan, using the Daserf remote access trojan. BRONZE BUTLER has targeted organizations in manufacturing, engineering and media industries, leveraging strategic web compromises and spearphishing to compromise their victims.
Threat Bottom Section BG

Contact us

Contact us directly whether your organization needs immediate assistance or
you want to discuss your incident readiness, response, and testing needs.