Skip to Content
China icon
China

BRONZE SIESTA

ObjectivesEspionage, Surveillance
AliasesDecisiveArchitect (Crowdstrike), Earth Bluecrow (Trend Micro), Red Menshen (PWC)
ToolsBPFDoor, Sliver, TinyShell

Summary

BRONZE SIESTA, also known as Red Menshen or Earth Bluecrow, is a China‑nexus advanced persistent threat (APT) group conducting long-term cyber espionage campaigns, primarily through the deployment of the stealthy BPFDoor Linux backdoor. The group’s operations centre on telecommunications networks and other critical sectors, including finance and retail, with observed activity across Asia and the Middle East. These environments provide high-value access to communications data, subscriber metadata, and government traffic, suggesting a state-aligned intelligence collection objective.
Threat Bottom Section BG

Contact us

Contact us directly whether your organization needs immediate assistance or
you want to discuss your incident readiness, response, and testing needs.