Skip to content
Nation-state APTIdeologyAdvanced sophistication · State-backed

BRONZE BUTLER

BRONZE BUTLER is a China-attributed nation-state APT group with an ideological motive, tracked by Brandefense. It targets 10 sectors, including Government and Technology, in 11 countries, including the United States and Australia. It uses 70 MITRE ATT&CK techniques and exploits 10 known CVEs.

Also known as
  • REDBALDKNIGHT
  • Tick
  • Stalker Panda
  • Stunmantrader
  • TAG-74
  • CTG-2006
  • TEMP.Tick
  • RedBaldNight
  • Stalker Taurus
  • Swirl Typhoon
  • G0060
  • Operation “ENDTRADE”
Origin
China
Techniques
70
Exploited CVEs
10
First seen
Jan 1, 2008
Last seen
Feb 28, 2021
Record updated

Who They Target.

Labelsespionage

About BRONZE BUTLER.

A Chinese state-sponsored threat group known for sophisticated cyber-espionage campaigns, often exploiting zero-day vulnerabilities.

Last updated Oct 19, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.