Threat Investigation
Request a demo
State-sponsored

DragonOK

DragonOK is classified as state-sponsored.

Malware families
7
Suspected state sponsor
China
Also known as
5

Threat group that has targeted Japanese organizations with phishing emails. Due to overlapping TTPs, including similar custom tools, DragonOK is thought to have a direct or indirect relationship with the threat group Moafee. 2223 It is known to use a variety of malware, including Sysget/HelloBridge, PlugX, PoisonIvy, FormerFirstRat, NFlog, and NewCT.

The group is suspected of operating with the support of China.

The group is associated with 7 malware families.

Also known as: Moafee, BRONZE OVERBROOK, G0017, G0002, Shallow Taurus

Threat Intelligence

Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.

DragonOK · Threat actors · Dark Radar