Suckfly
Suckfly is a China-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets 13 sectors, including Government and Technology, in 19 countries, including the United States and the United Kingdom. It uses 5 MITRE ATT&CK techniques and exploits 7 known CVEs.
- APT22
- BRONZE OLIVE
- Group 46
- G0039
- Wicked Spider
- Bronze Export
- Origin
- China
- Techniques
- 5
- Exploited CVEs
- 7
- First seen
- Jan 1, 2014
- Last seen
- May 17, 2016
- Record updated
Who They Target.
About Suckfly.
Since then we have identified a number of attacks over a two-year period, beginning in April 2014, which we attribute to Suckfly. The attacks targeted high-profile targets, including government and commercial organizations. These attacks occurred in several different countries, but our investigation revealed that the primary targets were individuals and organizations primarily located in India. While there have been several Suckfly campaigns that infected organizations with the group’s custom malware Backdoor.Nidiran, the Indian targets show a greater amount of post-infection activity than targets in other regions. This suggests that these attacks were part of a planned operation against specific targets in India.
Last updated Sep 19, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.