.svg?width=93&quality=80&auto=webp&format=auto&cache=true&immutable=true&cache-control=max-age%3D31536000 "Home"){kind=logo}
.svg?width=7&quality=80&auto=webp&format=auto&cache=true&immutable=true&cache-control=max-age%3D31536000 "Top Navigation - Sign in - Icon")
China
BRONZE WOODLAND
Summary
BRONZE WOODLAND, active since June 2014, has been observed leveraging phishing lures with Mandarin Chinese language artifacts and deploying the PlugX RAT. It has historically targeted entities in Russia and members of the Commonwealth of Independent States (CIS), specifically Belarus, Kazakhstan, Kyrgyzstan, Tajikistan, Ukraine and Uzbekistan. CTU researchers assess with moderate confidence that BRONZE WOODLAND operates on behalf of China.
Contact us
Contact us directly whether your organization needs immediate assistance or
you want to discuss your incident readiness, response, and testing needs.