logo

Tick APT Group (BRONZE BUTLER): A Long-Running East Asian Cyber Espionage Actor

ID: 16f6b395-61df-5895-ba20-6f59108ac89f

STIX ID: report--16f6b395-61df-5895-ba20-6f59108ac89f

Feed Name: Brandefense Blog

Threat Score
82/100

Date Published: 2026-03-05

Date Updated: 2026-04-27

Author: BRANDEFENSE

...
...

### Executive Summary This report profiles the Tick (Bronze Butler) APT as a long-running, China-linked espionage actor focused on East Asian government, defense, and industrial targets; it highlights Tick’s patient, low-noise tradecraft (spear-phishing, custom loaders/backdoors, stealthy HTTP/S C2, persistence via registry/task/service entries), its regional targeting and operational history, and provides defensive guidance around phishing controls, long-term monitoring, outbound traffic review, and patch management.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.