DragonOK is a Chinese state-sponsored cyber espionage group that first emerged in September 2014, with initial activities reported by FireEye. Its primary motivation is information theft and corporate espionage, specifically targeting entities to acquire trade secrets. The group operates under several aliases including BRONZE OVERBROOK, Shallow Taurus, and MITRE's G0017. DragonOK is particularly known for its persistent campaigns against Japanese organizations, later expanding its focus to include targets in Taiwan, Russia, Tibet, and Cambodia. The group is often associated with, or thought to have a direct or indirect relationship with, the Moafee threat group due to overlapping tactics, techniques, and procedures.

Aliases del actor

BRONZE OVERBROOKG0002G0017MoafeeShallow TaurusAPT DRAGONOKDragon CastlingCVE-2015-1641otras referencias asociadas a vulnerabilidadesamenazas de ciberseguridadG0075KHRAT TrojanDurusbiDudellDDKONG PluginSouth-East AsiahttpsCVE-2015-2545se ha relacionado con países como KazajistánKirguistánUzbekestánMyanmarNepalFilippinasprobablemente vinculado a otros grupos como NetTraveller

Actores similares

apt-dragonokactor · 1Operation Dragon Castlingapt · 0apt-camarodragonactor · 1apt-desertfalconactor · 1apt-glassesactor · 1apt-middleeastactor · 1apt-stealthfalconactor · 1Aoqin Dragonapt · 1Night Dragonapt · 1Amaranth-Dragonapt · 0