Threat actor · all actors

BRONZE BUTLERG0060 state

aka BRONZE BUTLER, REDBALDKNIGHT, Tick, Nian, STALKER PANDA, G0060, Stalker Taurus, PLA Unit 61419, Swirl Typhoon

Last updated: 2026-07-03

0attributed CVEs

58ATT&CK techniques

0.0IDF score (tooling uniqueness)

0exclusive CVEs

—years active

About this actor

[BRONZE BUTLER](https://attack.mitre.org/groups/G0060) is a cyber espionage group with likely Chinese origins that has been active since at least 2008. The group primarily targets Japanese organizations, particularly those in government, biotechnology, electronics manufacturing, and industrial chemistry.(Citation: Trend Micro Daserf Nov 2017)(Citation: Secureworks BRONZE BUTLER Oct 2017)(Citation: Trend Micro Tick November 2019)

Source: MITRE ATT&CK

Activity timeline

No activity events recorded.

Profile

CVE	Risk	CVSS	EPSS	Published	Products
No attributed CVEs.

Mitigating controls (NIST 800-53)

Control	Techniques covered	Coverage
`SI-4`	41 / 58	71%
`CM-2`	37 / 58	64%
`CM-6`	37 / 58	64%
`SI-3`	34 / 58	59%
`CA-7`	27 / 58	47%
`CM-7`	26 / 58	45%
`AC-3`	22 / 58	38%
`AC-6`	22 / 58	38%
`AC-2`	21 / 58	36%
`SI-7`	19 / 58	33%
`AC-4`	18 / 58	31%
`SC-7`	18 / 58	31%
`SI-2`	16 / 58	28%
`AC-5`	14 / 58	24%
`CM-5`	14 / 58	24%

Co-occurring actors

None.

Similar actors

Similar TTPs

Patchwork 0.41
MuddyWater 0.39
RedCurl 0.39
APT33 0.33
APT39 0.33