ClassicBrechasMapaActoresTTP MatrixAnaliticaAlertasCyberNewsArsenalExploitsKillChainOrigenSSLBLRansomLookRansomwhere
BRONZE STARLIGHT
0 incidentes
0 paises
0 sectores
apt CN Ultimo: -
Aliases: Cinnamon Tempest, DEV-0401, Emperor Dragonfly, SLIME34
BRONZE STARLIGHT is a China-based advanced persistent threat (APT) group that emerged in mid-2021, known for employing ransomware as a deceptive tactic to mask its primary objectives of intellectual property theft and cyber espionage. Unlike typical ransomware operations, this group manages all stages of its attacks independently, without relying on affiliate models or purchasing initial access from brokers. The group is commonly referred to by several aliases, including Cinnamon Tempest, DEV-0401, and Emperor Dragonfly, and it frequently rebrands its ransomware payloads to evade detection and attribution. The group's unique operational model, where ransomware serves as a smokescreen, distinguishes it from financially motivated cybercriminal enterprises.