MITRE ATT&CKgroup
G0103 Mofang
- Domain
- enterprise
- Version
- 1.1
- Created
- 2020-05-12
Description
Mofang is a likely China-based cyber espionage group, named for its frequent practice of imitating a victim's infrastructure. This adversary has been observed since at least May 2012 conducting focused attacks against government and critical infrastructure in Myanmar, as well as several other countries and sectors including military, automobile, and weapons industries.
Related
Uses · MITRE ATT&CK (8)
- T1027.015 Compression sub-technique
- T1027.013 Encrypted/Encoded File sub-technique
- S0444 ShimRat software (malware)
- S0445 ShimRatReporter software (tool)
- T1204.001 Malicious Link sub-technique
- T1204.002 Malicious File sub-technique
- T1566.001 Spearphishing Attachment sub-technique
- T1566.002 Spearphishing Link sub-technique
References
- https://foxitsecurity.files.wordpress.com/2016/06/fox-it_mofang_threatreport_tlp-white.pdf FOX-IT May 2016 Mofang