G0017 DragonOK
Enterprisealso known asDragonOK
DragonOK is a threat group that has targeted Japanese organizations with phishing emails. Due to overlapping TTPs, including similar custom tools, DragonOK is thought to have a direct or indirect relationship with the threat group Moafee. It is known to use a variety of malware, including Sysget/HelloBridge, PlugX, PoisonIvy, FormerFirstRat, NFlog, and NewCT.
01
canonical actor
The group this is attributed to.
02
software used (2)
Malware and tools associated with this.
03
source
Where this definition is published.