About this actor
[Moafee](https://attack.mitre.org/groups/G0002) is a threat group that appears to operate from the Guandong Province of China. Due to overlapping TTPs, including similar custom tools, Moafee is thought to have a direct or indirect relationship with the threat group [DragonOK](https://attack.mitre.org/groups/G0017). (Citation: Haq 2014)
Source: MITRE ATT&CK
Names & naming systems
Each vendor coins its own name for the same actor. Where a name follows a known scheme we attribute it; the rest are listed honestly as unclassified.
MITRE ATT&CKG-number catalogue id
Unclassifiedno scheme matched
How we know this
- Data origin
- MITRE ATT&CK Imported from the MITRE ATT&CK STIX bundle as an intrusion-set object.
- Techniques
- MITRE ATT&CK STIX mappings — 2 ATT&CK techniques on file.
- Named victims
- None on file.
Thin data: Only 2 ATT&CK techniques mapped — a thin behavioural profile; absence is not evidence of a narrow toolkit.
See how actor data is built for the full pipeline.
Activity timeline
No activity events recorded.
Profile
| CVE | Risk | CVSS | EPSS | Published | Products |
|---|---|---|---|---|---|
| No attributed CVEs. | |||||
Mitigating controls (NIST 800-53)
| Control | Techniques covered | Coverage |
|---|---|---|
AC-3 | 1 / 2 | 50% |
CM-2 | 1 / 2 | 50% |
CM-6 | 1 / 2 | 50% |
CM-7 | 1 / 2 | 50% |
SI-2 | 1 / 2 | 50% |
SI-3 | 1 / 2 | 50% |
SI-4 | 1 / 2 | 50% |
SI-7 | 1 / 2 | 50% |
Co-occurring actors
None.
Similar actors
Similar TTPs
- BlackOasis 0.50
- Putter Panda 0.12
- Group5 0.12
- Mofang 0.10
- Gallmaker 0.08