GINC-APT-0396 · State

Dragonbridge

Also Taizi Flood, Spamouflage, Spamouflage Dragon.

Category
State · Attributed to a state or working for one.
Origin
China(high confidence)
Sources
5 sources carry it
Identifier
GINC-APT-0396 · dragonbridge

What it is

DRAGONBRIDGE is a Chinese state-sponsored threat actor known for engaging in information operations to promote the political interests of the People's Republic of China. They have been observed using AI-generated images and videos to spread propaganda on social media platforms. The group has targeted various countries and regions, including the US, Taiwan, and Japan, with narratives promoting pro-PRC viewpoints. DRAGONBRIDGE has been linked to campaigns discrediting the US political system, sowing division between allies, and criticizing specific companies and individuals.

Names

The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.

Microsoft
Taizi Flood
Other names
Spamouflage, Spamouflage Dragon

Attribution

Each attribution is a claim: who makes it, and to whom. Western and Eastern sources are kept apart, as they often disagree.

Tools

The tools and malware families the sources tie to it.

  • China Chopper

Sources

  • Malpedia malpedia.caad.fkie.fraunhofer.de