Skip to Content
China icon
China

BRONZE UNIVERSITY

ObjectivesEspionage
AliasesAquatic Panda, Aquatic Panda (Crowdstrike), Charcoal Typhoon, Charcoal Typhoon (Microsoft), CHROMIUM, CHROMIUM (Microsoft), Earth Lusca, Earth Lusca (Trend Micro), FISHMONGER, FISHMONGER (ESET), Red Dev 10, Red Dev 10 (PWC), Red Scylla, Red Scylla (PWC), RedHotel, RedHotel (Recorded Future), Tag-22, Tag-22 (Recorded Future)
ToolsBrute Ratel C4, Cobalt Strike, Fishmaster, FunnySwitch, njRAT, ShadowPad, SprySOCKS, Spyder

Summary

BRONZE UNIVERSITY is a prolific and well-resourced cyberespionage group that has been active since at least 2019. The group has targeted a broad range of organizations globally across the transportation, natural resources, energy, and non-governmental sectors. CTU researchers assess with moderate confidence that the group is based in China. The threat group uses proprietary and publicly available tools and malware such as the Fishmaster downloader, Cobalt Strike, ShadowPad, Spyder, and FunnySwitch.
Threat Bottom Section BG

Contact us

Contact us directly whether your organization needs immediate assistance or
you want to discuss your incident readiness, response, and testing needs.