🇨🇳
DragonRank
APT Group
2 zero-day CVEs
Also Known As
No alias recordedTarget Countries 13
Countries highlighted in red
Belgium
Brazil
China
India
Japan
Republic of Korea
Netherlands
Philippines
Singapore
Thailand
Province of China Taiwan
United States
Vietnam
Sectors Targeted
National Security and International Affairs
928
Other Services (except Public Administration)
81
Arts, Entertainment, and Recreation
71
Agriculture, Forestry, Fishing and Hunting
11
Telecommunications
517
Information
51
NAICS:31
31
NAICS:48
48
Educational Services
61
Health Care and Social Assistance
62
Public Administration
92
Professional, Scientific, and Technical Services
54
Details
Origin
🇨🇳 CN
Last Updated
17 Sep 2024
MITRE ATT&CK 47
T1003 - OS Credential Dumping
T1016 - System Network Configuration Discovery
T1016-System Network Configuration Discovery
T1021 - Remote Services
T1021.001-Remote Services
T1033 - System Owner/User Discovery
T1033-System Owner
T1036 - Masquerading
T1055 - Process Injection
T1057 - Process Discovery
T1059 - Command and Scripting Interpreter
T1059.001 - PowerShell
T1059.003 - Windows Command Shell
T1059.007 - JavaScript
T1069 - Permission Groups Discovery
T1070 - Indicator Removal on Host
T1070-Indicator Removal on Host
T1071.001 - Web Protocols
T1078 - Valid Accounts
T1082 - System Information Discovery
T1083 - File and Directory Discovery
T1090 - Proxy
T1090.001 - Internal Proxy
T1098 - Account Manipulation
T1098-Account Manipulation
T1102 - Web Service
T1102.002 - Bidirectional Communication
T1102.003 - One-Way Communication
T1105 - Ingress Tool Transfer
T1105-Ingress Tool Transfer
T1112 - Modify Registry
T1133 - External Remote Services
T1136 - Create Account
T1136-Create Account
T1176 - Browser Extensions
T1189 - Drive-by Compromise
T1190 - Exploit Public-Facing Application
T1505 - Server Software Component
T1505.003 - Web Shell
T1518 - Software Discovery
T1553 - Subvert Trust Controls
T1555 - Credentials from Password Stores
T1555-Credentials from Password Stores
T1560 - Archive Collected Data
T1566 - Phishing
T1571 - Non-Standard Port
T1598.003 - Spearphishing Link