Hacker groupG0017
DragonOK
DragonOK is a threat group that has targeted Japanese organizations with phishing emails. Due to overlapping TTPs, including similar custom tools, DragonOK is thought to have a direct or indirect relationship with the threat group Moafee. It is known to use a variety of malware, including Sysget/HelloBridge, PlugX, PoisonIvy, FormerFirstRat, NFlog, and NewCT.
- Known attack methods
- 0
- Source
- MITRE ATT&CK
Fastnexa security experts
Would DragonOK's methods work on your company?
We test your defences using the techniques DragonOK is known for, then help you close the gaps before they find them.
Think you’ve already been hit? Don’t wait on a form: call or WhatsApp +1 (732) 454 2616. We reply within 1 hour, 24/7. Emergency help →
Malware
Families MITRE records this group deploying. Detection names for these are a reasonable place to start.
PlugXPoisonIvy