[Analysis_Report]Tick_Threat_Group.pdf

Tick Group (aka Bald Knight / Bronze Butler / RedBaldKnight) is a long‑running, targeted espionage actor active since at least 2008 and focused on Korean and Japanese organizations; this AhnLab report describes multiple campaigns and a diverse toolset — downloaders (Bisodown, Gofarer), backdoors (Daserf, Netboy, Datper, Xxmm), keyloggers, credential theft tools (WCE, Mimikatz), builders/controllers (shadowDawn, xxmm builders), steganography use, and extensive IoCs (sample MD5s, domains/URLs).