Cybersecurity researchers have disclosed details of a China-aligned threat cluster known as Bronze Sandcastle, which has been targeting organizations in Asia and Africa since mid-2025.
The vulnerability or weakness
The threat actor exploits Sandboxie DLL sideloading, a technique that tricks a legitimate program into loading a malicious DLL, enabling persistence and execution of attacker-controlled code.
Earlier attacks and coverage
No earlier related attack in our archive yet.
Business impact
Victims face potential data breaches, system compromises, and operational disruptions, leading to financial losses and reputational damage.
Industries affected
The threat is active in the UTC+8 time zone, affecting organizations in Asia and Africa, particularly in sectors like technology, finance, and government.
Users affected
Users and customers of targeted organizations may have their data and systems compromised, leading to privacy concerns and potential misuse of sensitive information.
