China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading to Deploy Backdoors

Security researchers have uncovered a new China-aligned threat cluster named Bronze Sandcastle, active since mid-2025 against targets in Asia and Africa. The group’s primary technical hallmark involves leveraging Sandboxie DLL sideloading techniques to stealthily deploy malicious backdoors onto compromised systems.