BRONZE UNION

Since 2013 BRONZE UNION has targeted organizations across a wide range of industry verticals including government, technology, manufacturing and non-governmental organizations in support of its political and military intelligence-collection objectives. CTU researchers assess with high confidence that BRONZE UNION operates on behalf of China. The group is adept at using a range of custom and openly available tools to identify and selectively exfiltrate high-value information and maintain access to sensitive systems over a long period of time. BRONZE UNION maintains a high degree of operational flexibility in order to adapt to the environments it operates in, using tools such as Sysupdate, PlugX, HttpBrowser and webshells including China Chopper, OwaAuth and a variant of ASPXSpy.