DragonOK — APT Profile
DragonOK is a threat group that has targeted Japanese organizations with phishing emails. Due to overlapping TTPs, including similar custom tools, DragonOK is thought to have a direct or indirect relationship with the threat group Moafee. It is known to use a variety of malware, including Sysget/HelloBridge, PlugX, PoisonIvy, FormerFirstRat, NFlog, and NewCT.Description reproduced from MITRE ATT&CK. © The MITRE Corporation, reproduced and distributed with permission.
Tools & malware
Vendor research
- OPERATION QUANTUM ENTANGLEMENT operation quantum
- Unit 42 Identifies New DragonOK Backdoor Malware Deployed Against Japanese Targets New DragonOK