•SiTech AI Team
China-Aligned Bronze Sandcastle Uses Sandboxie DLL Sideloading to Deploy Backdoors
Sophos details Bronze Sandcastle, a China-aligned group active since mid-2025 that abuses Sandboxie and other legitimate executables to sideload malicious DLLs and install backdoors on victims in Asia and Africa.