Nation-state APTEspionage
Roaming Tiger
Roaming Tiger is a China-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets organisations in 7 countries, including Russia and Ukraine.
Also known as
- Rotten Tomato
- CTG-7273
- Bronze Woodland
- Origin
- China
- Techniques
- 0
- Exploited CVEs
- No CVE data
- First seen
- Jan 1, 2014
- Record updated
Who They Target.
About Roaming Tiger.
The attack was found to heavily rely on RTF exploits and at the time, thought to make use of the PlugX malware family.
Last updated Sep 11, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.