All actors

BRONZE EDGEWOOD

Also reported as Red Hariasa, FunnyDream, Bronze Edgewood and TAG-16. Linked to China by three sources.

Reports
31
Last reported
Known CVEs
8
Origin
China
ID
bronze-edgewood
Merge evidence
4 alias matches

Reports per quarter

  1. 2020 Q2: 1 report
  2. 2020 Q3: no reports
  3. 2020 Q4: 1 report
  4. 2021 Q1: 3 reports
  5. 2021 Q2: no reports
  6. 2021 Q3: no reports
  7. 2021 Q4: 1 report
  8. 2022 Q1: no reports
  9. 2022 Q2: 5 reports
  10. 2022 Q3: no reports
  11. 2022 Q4: no reports
  12. 2023 Q1: 2 reports
  13. 2023 Q2: no reports
  14. 2023 Q3: no reports
  15. 2023 Q4: no reports
  16. 2024 Q1: no reports
  17. 2024 Q2: no reports
  18. 2024 Q3: no reports
  19. 2024 Q4: no reports
  20. 2025 Q1: no reports
  21. 2025 Q2: no reports
  22. 2025 Q3: 1 report
  23. 2025 Q4: no reports
  24. 2026 Q1: no reports
  25. 2026 Q2: 17 reports
Dated reports, 2020 Q2 to 2026 Q2.

CVEs named in reports

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

  1. Bankshot (Malware Family)

    date ORKL added it fromORKL

  2. StoneDrill (Malware Family)

    date ORKL added it fromORKL

  3. Crimson RAT (Malware Family)

    date ORKL added it fromORKL

  4. Oblique RAT (Malware Family)

    date ORKL added it fromORKL

  5. METALJACK (Malware Family)

    date ORKL added it fromORKL

  6. elf.wellmess (Malware Family)

    date ORKL added it fromORKL

  7. SUNBURST (Malware Family)

    date ORKL added it fromORKL

  8. Ave Maria (Malware Family)

    date ORKL added it fromORKL

  9. Agent Tesla (Malware Family)

    date ORKL added it fromORKL

Show all 31 reports Show fewer
  1. QakBot (Malware Family)

    date ORKL added it fromORKL

  2. Nefilim (Malware Family)

    date ORKL added it fromORKL

  3. BazarBackdoor (Malware Family)

    date ORKL added it fromORKL

  4. REvil (Malware Family)

    date ORKL added it fromORKL

  5. WastedLocker (Malware Family)

    date ORKL added it fromORKL

  6. PowGoop (Malware Family)

    date ORKL added it fromORKL

  7. Maze (Malware Family)

    date ORKL added it fromORKL

  8. APT ToddyCat

    Malpedia library date Kaspersky fromORKLCCS '25 data

  9. Microsoft Exchange servers hacked by new ToddyCat APT gang

    date in the title fromORKL

  10. nao-sec.org-Royal Road ReDive

    date in the CCS '25 data nao_sec fromORKLCCS '25 data

  11. Royal Road! Re-Dive

    date in the title fromORKL

Newest first. Details opens the report in Explore.