Threat actorChinaTracked since 2026-11

Cinnamon Tempest

Also known as:BRONZE STARLIGHT

As of 2026-11-05, Cinnamon Tempest is a China-nexus threat actor tracked by Threadlinqs Intelligence across 1 threat spanning ransomware. Also known as BRONZE STARLIGHT.

Tracked threats: 11 high
First seen: 2026-112026-11-05
Last seen: 2026-112026-11-05
ATT&CK techniques: —No mapped techniques yet
Related CVEs: 0None referenced
Attribution: ChinaNation or origin

Nation: China · 1 tracked threat(s) · Categories: RANSOMWARE

Activity timeline

Cinnamon Tempest appears in 1 tracked threat between 2026-11-05 and 2026-11-05.

Tracked threats

Rook Ransomware (.Rook) - Babuk-derived ransomware with AES-128/RSA-2048 encryption linked to BRONZE STARLIGHTHIGH2026-11-05