.svg?width=93&quality=80&auto=webp&format=auto&cache=true&immutable=true&cache-control=max-age%3D31536000 "Home"){kind=logo}
.svg?width=7&quality=80&auto=webp&format=auto&cache=true&immutable=true&cache-control=max-age%3D31536000 "Top Navigation - Sign in - Icon")
China
BRONZE SANDCASTLE
Summary
BRONZE SANDCASTLE is a threat group likely working under the direction of the leadership of the People's Republic of China (PRC). The group has been observed since mid-2025, and is associated with DLL side-loading attacks that execute a modified meterpreter payload. The group has been observed targeting organizations consistent with PRC intelligence gathering requirements in Asia and Africa.
Contact us
Contact us directly whether your organization needs immediate assistance or
you want to discuss your incident readiness, response, and testing needs.