Home / Threat actors / Daggerfly
Daggerfly G1034
Also known as: Evasive Panda, BRONZE HIGHLAND
Updated at source on Jul 31, 2026 · View on MITRE ATT&CK
0
associated CVEs
20
Techniques
6
Malware and tools
Daggerfly is a People's Republic of China-linked APT entity active since at least 2012. Daggerfly has targeted individuals, government and NGO entities, and telecommunication companies in Asia and Africa. Daggerfly is associated with exclusive use of MgBot malware and is noted for several potential supply chain infection campaigns.
Exploited vulnerabilities
CVEs cited by MITRE ATT&CK for this group, with the source excerpt. Records not yet published here appear without a link.
ATT&CK does not cite CVEs for this group.
Techniques by tactic
Resource Development
T1584.004 ServerT1587.002 Code Signing Certificates Initial Access
T1189 Drive-by CompromiseT1195.002 Compromise Software Supply Chain Execution
T1053.005 Scheduled TaskT1059.001 PowerShellT1204.001 Malicious LinkT1574.001 DLL Persistence
T1053.005 Scheduled TaskT1136.001 Local Account Privilege Escalation
T1053.005 Scheduled Task Stealth
T1036.003 Rename Legitimate UtilitiesT1218.011 Rundll32T1574.001 DLL Defense Impairment
T1553.002 Code Signing Credential Access
T1003.002 Security Account Manager Discovery
T1012 Query RegistryT1082 System Information Discovery Command and Control
T1071.001 Web ProtocolsT1105 Ingress Tool Transfer © The MITRE Corporation. ATT&CK® content reproduced and distributed with the permission of The MITRE Corporation.