Skip to Content
China icon
China

BRONZE OVERBROOK

ObjectivesEspionage
AliasesDanti (Kaspersky), DragonOK (Palo Alto), Samurai Panda (CrowdStrike), Shallow Taurus (Palo Alto), Temp.DragonOK (FireEye)
ToolsAveo, DDKONG, Godzilla Webshell, HelloBridge, IsSpace, NFLog Trojan, PLAINTEE, PlugX, Rambo

Summary

BRONZE OVERBROOK, referred to in public reporting as DragonOK, has targeted high technology and manufacturing organizations in Taiwan and Japan with the aim of stealing sensitive intellectual property. BRONZE OVERBROOK has historically used tools including PoisonIvy, Sysget (aka HelloBridge), PlugX, IsSpace, Rambo and Aveo. Analysis of behaviors, infrastructure and targeting has led CTU researchers to assess with moderate confidence that the group operates on behalf of China.
Threat Bottom Section BG

Contact us

Contact us directly whether your organization needs immediate assistance or
you want to discuss your incident readiness, response, and testing needs.