BRONZE OVERBROOK

BRONZE OVERBROOK, referred to in public reporting as DragonOK, has targeted high technology and manufacturing organizations in Taiwan and Japan with the aim of stealing sensitive intellectual property. BRONZE OVERBROOK has historically used tools including PoisonIvy, Sysget (aka HelloBridge), PlugX, IsSpace, Rambo and Aveo. Analysis of behaviors, infrastructure and targeting has led CTU researchers to assess with moderate confidence that the group operates on behalf of China.