BRONZE GLOBE

BRONZE GLOBE, also known as DNSCalc, APT12 and Numbered Panda, targets organizations in a wide range of sectors including technology, media and government. CTU researchers assess with moderate confidence that the group operates on behalf of China. A subset of BRONZE GLOBE’s intrusion activity appears to be reactive in nature, for example targeting Fukushima following the 2011 nuclear incident and the New York Times in 2013, which seemingly followed negative reporting on China’s political leadership. The group was historically very active and leveraged multiple remote access trojans including Ixeshe, Mswab and Gh0st as part its campaigns.