CVE Intelligence
Início / Grupos de ameaça / Aoqin Dragon

Aoqin Dragon G1007

🔔 Criar alerta

Atualizado na fonte em 31/07/2026 · Ver no MITRE ATT&CK

2
CVEs associadas
10
Técnicas
2
Malwares e ferramentas

Aoqin Dragon is a suspected Chinese cyber espionage threat group that has been active since at least 2013. Aoqin Dragon has primarily targeted government, education, and telecommunication organizations in Australia, Cambodia, Hong Kong, Singapore, and Vietnam. Security researchers noted a potential association between Aoqin Dragon and UNC94, based on malware, infrastructure, and targets.

Vulnerabilidades exploradas

CVEs citadas pelo MITRE ATT&CK para este grupo, com o trecho da fonte. Fichas ainda não publicadas aqui aparecem sem link.

CVE-2012-0158 Alta · 8.8 KEV Ransomware Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability
“Aoqin Dragon has exploited CVE-2012-0158 and CVE-2010-3333 for execution against targeted systems.”
CVE-2010-3333 Alta · 7.8 KEV Microsoft Office Stack-based Buffer Overflow Vulnerability
“Aoqin Dragon has exploited CVE-2012-0158 and CVE-2010-3333 for execution against targeted systems.”

Técnicas por tática

Desenvolvimento de recursos
T1587.001 MalwareT1588.002 Tool
Acesso inicial
T1091 Replication Through Removable Media
Execução
T1203 Exploitation for Client ExecutionT1204.002 Malicious File
Furtividade
T1027.002 Software PackingT1036 Masquerading
Descoberta
T1083 File and Directory Discovery
Movimento lateral
T1091 Replication Through Removable MediaT1570 Lateral Tool Transfer

Malwares e ferramentas

© The MITRE Corporation. Conteúdo do ATT&CK® reproduzido e distribuído com permissão da MITRE Corporation. Descrições em inglês, como na fonte.