Moafee — ATT&CK profile, 1 technique

Overview

Moafee is a threat group that appears to operate from the Guandong Province of China. Due to overlapping TTPs, including similar custom tools, Moafee is thought to have a direct or indirect relationship with the threat group DragonOK.

Naming & attribution

It uses 1 documented ATT&CK technique — more than 2% of the 174 groups tracked here.

Who calls this group what — MITRE lists each alias with the report that used it, but not which vendor coined it.
Name	First reported by
Moafee	Haq, T., Moran, N., Scott, M., & Vashisht, S. O

Targets

Private sector

Regions

United States

TTPs — 1 technique across 1 tactic

Stealth

T1027.001 Binary Padding

Tools & malware (1)

PoisonIvy

Reporting (1)

The Path to Mass-Producing Cyber Attacks [Blog] — Haq, T., Moran, N., Scott, M., & Vashisht, S. O