MITRE ATT&CKgroup
G1007 Aoqin Dragon
- Domain
- enterprise
- Version
- 1.0
- Created
- 2022-07-14
Description
Aoqin Dragon is a suspected Chinese cyber espionage threat group that has been active since at least 2013. Aoqin Dragon has primarily targeted government, education, and telecommunication organizations in Australia, Cambodia, Hong Kong, Singapore, and Vietnam. Security researchers noted a potential association between Aoqin Dragon and UNC94, based on malware, infrastructure, and targets.
Related
Uses · MITRE ATT&CK (11)
- S1026 Mongall software (malware)
- S1027 Heyoka Backdoor software (malware)
- T1587.001 Malware sub-technique
- T1588.002 Tool sub-technique
- T1204.002 Malicious File sub-technique
- T1570 Lateral Tool Transfer technique
- T1027.002 Software Packing sub-technique
- T1203 Exploitation for Client Execution technique
- T1036 Masquerading technique
- T1083 File and Directory Discovery technique
- T1091 Replication Through Removable Media technique
References
- https://www.sentinelone.com/labs/aoqin-dragon-newly-discovered-chinese-linked-apt-has-been-quietly-spying-on-organizations-for-10-years/ SentinelOne Aoqin Dragon June 2022