Covered by 2 outlets — first reported by Sophos News, Oct 20, 00:00 UTC
BRONZE SANDCASTLE deploys modified Meterpreter shells
MentionsSophos
In brief
Cybersecurity researchers have disclosed details of a previously undocumented China-aligned threat cluster known as Bronze Sandcastle that has been observed targeting organizations in Asia and Africa since mid-2025. "The most distinctive technical marker for Bronze Sandcastle is its consistent use of Sandboxie DLL sideloading," Sophos security researcher Gabor Szappanos said in a post published
From The Hacker News's coverage.
Continue reading
2 outlets, in the order they reported it.
Sophos NewsFirst report
BRONZE SANDCASTLE deploys modified Meterpreter shells
The China-based threat group uses DLL sideloading in these attacks
The Hacker News
China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading to Deploy Backdoors
Cybersecurity researchers have disclosed details of a previously undocumented China-aligned threat cluster known as Bronze Sandcastle that has been observed targeting organizations in Asia and Africa since mid-2025.
Explained
The technology and terms in this story. Learn more