Aoqin Dragon
MITRE: G1007Aoqin Dragon is a suspected Chinese cyber espionage threat group that has been active since at least 2013. Aoqin Dragon has primarily targeted government, education, and telecommunication organizations in Australia, Cambodia, Hong Kong, Singapore, and Vietnam. Security researchers noted a potential association between Aoqin Dragon and UNC94, based on malware, infrastructure, and targets.
Aoqin Dragon is an advanced persistent threat (APT) that has been identified by security researchers in recent years. It is believed to be associated with Chinese state-sponsored hacking groups and is responsible for targeted attacks on government agencies, military organizations, and private companies around the world. The Aoqin Dragon group uses a variety of tactics such as spear phishing emails, malware drops, and social engineering techniques to gain access to sensitive information from their targets. Once inside an organization\\\'s network, they can steal confidential data or disrupt operations by installing backdoors and other types of malicious software. The group is highly skilled in evading detection and has been able to operate for several years without being identified until recently when security researchers began analyzing their tactics and techniques.\\
\\
Techniques, tactics and practices: \\
\\
Aoqin Dragon is an advanced persistent threat that uses a variety of tactics to gain access to sensitive information from their targets. Some of these techniques include spear phishing emails, malware drops, and social engineering techniques such as baiting or pretexting. They also use backdoors and other types of malicious software to steal confidential data once inside an organization\\\'s network. The group is highly skilled in evading detection and has been able to operate for several years without being identified until recently when security researchers began analyzing their tactics and techniques.