Roaming Tiger

Analyst brief

Roaming Tiger, also tracked as BRONZE WOODLAND and Rotten Tomato, is a threat actor whose type remains unknown. This actor likely targets strategically important entities such as government bodies, telecommunications, or the energy sector for data theft or cyber espionage purposes. Its key TTPs may include targeted phishing and custom tools for establishing remote access, and leveraging C2 infrastructure to maintain persistence. Defenders should focus on email protection and network anomaly monitoring, and since no specific indicators are provided, they should investigate known IOCs associated with this actor.