AdversaryGraph public intelligence page

This page is part of Threat Matrix, the public browser workspace for the main AdversaryGraph platform. Use it for ATT&CK pivots, actor and technique context, similarity leads, detection coverage review, and analyst-ready investigation paths.

Validation disclaimer: TTP overlap, actor similarity, generated summaries, and coverage findings are investigation leads, not attribution proof or operational validation without analyst review.

Main AdversaryGraph project Documentation Malware Analysis GitHub

G1034 · 17 ATT&CK techniques · 0 correlated reports

Daggerfly

Aliases: Evasive Panda, BRONZE HIGHLAND

Daggerfly is a People's Republic of China-linked APT entity active since at least 2012. Daggerfly has targeted individuals, government and NGO entities, and telecommunication companies in Asia and Africa. Daggerfly is associated with exclusive use of MgBot malware and is noted for several potential supply chain infection campaigns.

Open interactive actor investigation

ATT&CK techniques

T1003.002
Security Account Manager T1587.002
Code Signing Certificates T1053.005
Scheduled Task T1071.001
Web Protocols T1059.001
PowerShell T1036.003
Rename System Utilities T1204.001
Malicious Link T1105
Ingress Tool Transfer T1082
System Information Discovery T1195.002
Compromise Software Supply Chain T1574.002
DLL Side-Loading T1218.011
Rundll32 T1584.004
Server T1136.001
Local Account T1553.002
Code Signing T1012
Query Registry T1189
Drive-by Compromise

Correlated CTI and IR reports

Continue the investigation

Interactive AdversaryGraph AdversaryGraph documentation CTI Analyst Field Manual Israel Threat Actors CTI Anomaly Detection Atlas Insider Threat Detection Guide 1200km Medium research