[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7eOZo14Kr5NkBWNtB3Skf-CvbmkmMLMedsDpOxxDM2E":3},{"success":4,"data":5},true,{"name":6,"slug":7,"aliases":8,"description":14,"country":15,"suspected_sponsor":16,"target_industries":17,"target_countries":19,"incident_types":21,"references":23,"techniques":36,"technique_count":37,"created_at":38,"seoMetadata":39,"schemaOrg":43},"DragonOK","dragonok",[9,10,11,12,13],"Moafee","BRONZE OVERBROOK","G0017","G0002","Shallow Taurus","Threat group that has targeted Japanese organizations with phishing emails. Due to overlapping TTPs, including similar custom tools, DragonOK is thought to have a direct or indirect relationship with the threat group Moafee. 2223 It is known to use a variety of malware, including Sysget\u002FHelloBridge, PlugX, PoisonIvy, FormerFirstRat, NFlog, and NewCT.","CN","China",[18],"Private sector",[20],"United States",[22],"Espionage",[24,25,26,27,28,29,30,31,32,33,34,35],"https:\u002F\u002Fwww.fireeye.com\u002Fcontent\u002Fdam\u002Ffireeye-www\u002Fglobal\u002Fen\u002Fcurrent-threats\u002Fpdfs\u002Fwp-operation-quantum-entanglement.pdf","https:\u002F\u002Fattack.mitre.org\u002Fwiki\u002FGroups","https:\u002F\u002Fwww.forcepoint.com\u002Fde\u002Fblog\u002Fx-labs\u002Ftrojanized-adobe-installer-used-install-dragonok-s-new-custom-backdoor","https:\u002F\u002Fgithub.com\u002Fm0n0ph1\u002FAPT_CyberCriminal_Campagin_Collections-1\u002Fblob\u002Fmaster\u002F2017\u002F2017.02.15.deep-dive-dragonok-rambo-backdoor\u002FDeep%20Dive%20on%20the%20DragonOK%20Rambo%20Backdoor%20_%20Morphick%20Cyber%20Security.pdf","https:\u002F\u002Fwww.cfr.org\u002Finteractive\u002Fcyber-operations\u002Fmoafee","https:\u002F\u002Funit42.paloaltonetworks.com\u002Funit-42-identifies-new-dragonok-backdoor-malware-deployed-against-japanese-targets\u002F","https:\u002F\u002Funit42.paloaltonetworks.com\u002Funit42-dragonok-updates-toolset-targets-multiple-geographic-regions\u002F","https:\u002F\u002Fwww.phnompenhpost.com\u002Fnational\u002Fkingdom-targeted-new-malware","https:\u002F\u002Fattack.mitre.org\u002Fgroups\u002FG0017\u002F","https:\u002F\u002Fattack.mitre.org\u002Fgroups\u002FG0002\u002F","https:\u002F\u002Fwww.secureworks.com\u002Fresearch\u002Fthreat-profiles\u002Fbronze-overbrook","https:\u002F\u002Funit42.paloaltonetworks.com\u002Fatoms\u002Fshallowtaurus\u002F",[],0,"2023-08-09T17:25:09.409843+00:00",{"title":40,"metaDescription":41,"keywords":42},"DragonOK Threat Actor Profile | EdgeProtect","Threat group that has targeted Japanese organizations with phishing emails. Due to overlapping TTPs, including similar custom tools, DragonOK is thoug...","DragonOK, Moafee, BRONZE OVERBROOK, G0017, G0002, Shallow Taurus, threat actor, APT, cyber threat, threat intelligence, Private sector, China, CN",{"@context":44,"@type":45,"name":6,"alternateName":46,"description":14,"url":47,"mainEntityOfPage":48,"location":50},"https:\u002F\u002Fschema.org","Organization",[9,10,11,12,13],"https:\u002F\u002Fdev.precursorintelligence.com\u002Fthreat-actors\u002Fdragonok",{"@type":49,"@id":47},"WebPage",{"@type":51,"name":15},"Country"]