← threatfilter.dev / all groups / Mofang
Mofang
Overview
Mofang is a likely China-based cyber espionage group, named for its frequent practice of imitating a victim's infrastructure. This adversary has been observed since at least May 2012 conducting focused attacks against government and critical infrastructure in Myanmar, as well as several other countries and sectors including military, automobile, and weapons industries.
Targets
Government · Private sector
Regions
Canada · Germany · India · Myanmar · Singapore · South Korea · United States
TTPs — 6 techniques across 3 tactics
Initial Access
-
T1566.001Spearphishing Attachment -
T1566.002Spearphishing Link
Execution
-
T1204.001Malicious Link -
T1204.002Malicious File
Stealth
-
T1027.013Encrypted/Encoded File -
T1027.015Compression
Tools & malware (2)
ShimRatReporter · ShimRat
Reporting (1)
- Mofang: A politically motivated information stealing adversary — Yonathan Klijnsma