G1007 · 9 ATT&CK techniques · 0 correlated reports

Aoqin Dragon

Aliases: None listed

Aoqin Dragon is a suspected Chinese cyber espionage threat group that has been active since at least 2013. Aoqin Dragon has primarily targeted government, education, and telecommunication organizations in Australia, Cambodia, Hong Kong, Singapore, and Vietnam. Security researchers noted a potential association between Aoqin Dragon and UNC94, based on malware, infrastructure, and targets.

Open interactive actor investigation

ATT&CK techniques

T1204.002
Malicious FileT1570
Lateral Tool TransferT1091
Replication Through Removable MediaT1027.002
Software PackingT1587.001
MalwareT1083
File and Directory DiscoveryT1036.005
Match Legitimate Name or LocationT1588.002
ToolT1203
Exploitation for Client Execution

Correlated CTI and IR reports

Continue the investigation

Interactive ThreatMapper ThreatMapper documentation CTI Analyst Field Manual Israel Threat Actors CTI Anomaly Detection Atlas ITDR Handbook 1200km Medium research