BRONZE GENEVA

BRONZE GENEVA is a threat group that CTU researchers assess with moderate confidence operates on behalf of China and has been active since at least 2005. The group's intent appears to be theft of political, economic and military information from commercial and government networks globally. BRONZE GENEVA, also known in public reporting as APT30, has been observed targeting information held by Asian organizations (specifically in the South China Sea region), which is likely consistent with the intelligence gathering requirements of the Chinese state. The group appears to have developed their toolset, which includes the Lecna remote access trojan, over an extended period of time.