Home / Threat actors / DragonOK
DragonOK G0017
Updated at source on Jul 31, 2026 · View on MITRE ATT&CK
0
associated CVEs
0
Techniques
2
Malware and tools
DragonOK is a threat group that has targeted Japanese organizations with phishing emails. Due to overlapping TTPs, including similar custom tools, DragonOK is thought to have a direct or indirect relationship with the threat group Moafee. It is known to use a variety of malware, including Sysget/HelloBridge, PlugX, PoisonIvy, FormerFirstRat, NFlog, and NewCT.
Exploited vulnerabilities
CVEs cited by MITRE ATT&CK for this group, with the source excerpt. Records not yet published here appear without a link.
ATT&CK does not cite CVEs for this group.
© The MITRE Corporation. ATT&CK® content reproduced and distributed with the permission of The MITRE Corporation.