2019_AhnLab_Template

### Executive summary This AhnLab presentation analyzes the Tick (Bronze Butler / RedBaldKnight) threat actor active against Korean and Japanese targets over ~2008–2019, describing multiple custom malware families (dropper/downloader/backdoor/stealer/keyloggers), tool-builders, weaponized secure USB campaigns targeting air-gapped systems, credential-theft tooling (Mimikatz/WCE), and associated C2 domains/IPs and timelines.