BRONZE UNIVERSITY

BRONZE UNIVERSITY is a prolific and well-resourced cyberespionage group that has been active since at least 2019. The group has targeted a broad range of organizations globally across the transportation, natural resources, energy, and non-governmental sectors. CTU researchers assess with moderate confidence that the group is based in China. The threat group uses proprietary and publicly available tools and malware such as the Fishmaster downloader, Cobalt Strike, ShadowPad, Spyder, and FunnySwitch.