BRONZE SPIRAL is a cyber espionage group, assessed with low confidence to be of Chinese origin, primarily motivated by the theft of sensitive data and intellectual property. The group gained attention in December 2020 for exploiting a vulnerability in SolarWinds Orion Platform software, specifically CVE-2020-10148, to deploy the SUPERNOVA web shell. This incident saw the group maintain network access for approximately a year, from March 2020 to February 2021, demonstrating a persistent approach to intrusions and an ability to operate undetected within compromised environments for extended periods. The group is known for its long-term campaigns and adaptive methods, often leveraging native system tools and living off the land techniques. BRONZE SPIRAL is a designation used by some researchers, and is distinct from other China-linked groups that also use the 'Bronze' prefix, such as BRONZE UNION or BRONZE STARLIGHT.

Actores similares

bronze-highlandactor · 1BRONZE BUTLERactor · 1spiralactor · 1BRONZE HIGHLANDapt · 0BRONZE SPRINGapt · 0BRONZE EDGEWOODapt · 0BRONZE VAPORapt · 0BRONZE STARLIGHTapt · 0