CopperDragon is a malware framework linked to China-nexus threat actors targeting high-profile organizations globally, including in Latin America, Asia, and Europe. It supports multiple intrusion campaigns grouped into three clusters—SilentDelivery, OceanGate, and DarkWire—each using distinct backdoors and sophisticated techniques such as kernel rootkits, trojanized SSH tools, and credential harvesting across Linux and Windows systems. The campaigns focus on government, critical infrastructure, and telecommunications sectors.
