Home / Threat actors / Mofang
Mofang G0103
Updated at source on Jul 31, 2026 · View on MITRE ATT&CK
0
associated CVEs
6
Techniques
2
Malware and tools
Mofang is a likely China-based cyber espionage group, named for its frequent practice of imitating a victim's infrastructure. This adversary has been observed since at least May 2012 conducting focused attacks against government and critical infrastructure in Myanmar, as well as several other countries and sectors including military, automobile, and weapons industries.
Exploited vulnerabilities
CVEs cited by MITRE ATT&CK for this group, with the source excerpt. Records not yet published here appear without a link.
ATT&CK does not cite CVEs for this group.
Techniques by tactic
Initial Access
T1566.001 Spearphishing AttachmentT1566.002 Spearphishing Link Execution
T1204.001 Malicious LinkT1204.002 Malicious File Stealth
T1027.013 Encrypted/Encoded FileT1027.015 Compression Malware and tools
- ShimRatMalwareS0444
- ShimRatReporterToolS0445
© The MITRE Corporation. ATT&CK® content reproduced and distributed with the permission of The MITRE Corporation.