APT Explorer

All actors

DragonOK

Also reported as Shallow Taurus, Moafee, BRONZE OVERBROOK and Bronze Overbrook. Linked to China by three sources.

Reports
185
Last reported
Known CVEs
104
Origin
China
ID
G0017
Sources
ATT&CKMISPETDAMalpedia
Merge evidence
11 alias matches

Reports per quarter

Dated reports, 2013 Q1 to 2026 Q2.

Techniques seen in the last two years

Show all 38 techniques Show fewer

Counts come from technique IDs in the actor's report text.

CVEs named in reports

Show all 104 CVEs Show fewer

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

  1. Threat Group Cards: A Threat Actor Encyclopedia

    date ORKL added it ORKL

    The title opens a link whose publisher is not confirmed. Archived copy on ORKL Details

  2. CVE-2015-2545: overview of current threats

    date ORKL added it ORKL

    Archived copy on ORKL Details

  3. China-based APT Mustang Panda might still have continued their attack activities against organizations in

    date ORKL added it ORKL

    Archived copy on ORKL Details

  4. Poison Ivy (Malware Family)

    date ORKL added it ORKL

    The title opens a link whose publisher is not confirmed. Archived copy on ORKL Details

  5. Accenture | Let there be change

    date ORKL added it ORKL

    Archived copy on ORKL Details

  6. The Rambo Backdoor

    date ORKL added it ORKL

    Archived copy on ORKL Details

  7. PlugX (Malware Family)

    date ORKL added it ORKL

    The title opens a link whose publisher is not confirmed. Archived copy on ORKL Details

  8. Accenture | Let there be change

    date ORKL added it ORKL

    Archived copy on ORKL Details

  9. PlugX : Mustang Panda APT

    Malpedia library date ORKL

    Archived copy on ORKL Details

  10. PlugX Meeting Invitation via MSBuild and GDATA

    Malpedia library date ORKL

    Archived copy on ORKL Details

Show all 185 reports Show fewer

  1. The HoneyMyte APT evolves with a kernel-mode rootkit and a ToneShell backdoor

    Malpedia library date ORKL

    Archived copy on ORKL Details

  2. UNC6384 Weaponizes ZDI-CAN-25373 Vulnerability to Deploy PlugX Against Hungarian and Belgian Diplomatic Entities - Arctic Wolf

    Malpedia library date ORKL

    Archived copy on ORKL Details

  3. PRC-Nexus Espionage Campaign Hijacks Web Traffic to Target Diplomats

    Malpedia library date ORKL

    Archived copy on ORKL Details

  4. Updated Shadowpad Malware Leads to Ransomware Deployment

    Malpedia library date ORKL

    Archived copy on ORKL Details

  5. Meet NailaoLocker: a ransomware distributed in Europe by ShadowPad and PlugX backdoors

    Malpedia library date ORKL

    Archived copy on ORKL Details

  6. Updated Shadowpad Malware Leads to Ransomware Deployment

    Malpedia library date ORKL

    Archived copy on ORKL Details

  7. China-linked Espionage Tools Used in Ransomware Attacks

    Malpedia library date ORKL

    Archived copy on ORKL Details

  8. CL-STA-0048: An Espionage Operation Against High-Value Targets in South Asia

    Malpedia library date ORKL

    Archived copy on ORKL Details

  9. Justice Department and FBI Conduct International Operation to Delete Malware Used by China-Backed Hackers

    Malpedia library date ORKL

    Archived copy on ORKL Details

  10. Chinese State-Sponsored RedDelta Targeted Taiwan, Mongolia, and Southeast Asia with Adapted PlugX Infection Chain

    Malpedia library date ORKL

    Archived copy on ORKL Details

  11. Unmasking Adversary Infrastructure: How Certificates and Redirects Exposed Earth Baxia and PlugX Activity

    Malpedia library date ORKL

    Archived copy on ORKL Details

  12. Down-the-GRAYRABBIT-hole-exposing-UNC3569-and-its-modus-operandi.pdf

    Malpedia library date ORKL

    Archived copy on ORKL Details

  13. DragonRank, a Chinese-speaking SEO manipulator service provider

    Malpedia library date ORKL

    Archived copy on ORKL Details

  14. Sailing_the_Seven_SEAs_Deep_Dive_into_Polaris_Arsenal_and_Intelligence_Insights.pdf

    Malpedia library date ORKL

    Archived copy on ORKL Details

  15. China-Nexus Threat Group ‘Velvet Ant’ Abuses F5 Load Balancers for Persistence

    Malpedia library date ORKL

    Archived copy on ORKL Details

  16. Operation Diplomatic Specter: An Active Chinese Cyberespionage Campaign Leverages Rare Tool Set to Target Governmental Entities in the Middle East, Africa and Asia

    Malpedia library date ORKL

    Archived copy on ORKL Details

  17. Finding Malware: Detecting SOGU with Google Security Operations.

    Malpedia library date ORKL

    Archived copy on ORKL Details

  18. Wirtschaftsspionage gegen Volkwagen: VW-Konzern wurde jahrelang ausge…

    Malpedia library date ORKL

    The title opens archive.today, not the publisher’s page. Archived copy on ORKL Details

  19. Earth Krahang Exploits Intergovernmental Trust to Launch Cross-Government Attacks

    Malpedia library date ORKL

    Archived copy on ORKL Details

  20. The Secret Life of RATs: connecting the dots by dissecting multiple backdoors

    Malpedia library date ORKL

    Archived copy on ORKL Details

  21. PowerPoint 簡報

    Malpedia library date TeamT5 ORKL

    Archived copy on ORKL Details

  22. A Look into PlugX Kernel driver

    Malpedia library date ORKL

    Archived copy on ORKL Details

  23. 2023 Adversary Infrastructure Report

    Malpedia library date ORKL

    Archived copy on ORKL Details

  24. Unmasking the Enigma: A Historical Dive into the World of PlugX Malware | Splunk

    Malpedia library date ORKL

    Archived copy on ORKL Details

  25. Carderbee Targets Hong Kong in Supply Chain Attack

    Malpedia library date ORKL

    Archived copy on ORKL Details

  26. My Tea’s not cold. An overview of China’s cyber threat

    Malpedia library date ORKL

    Archived copy on ORKL Details

  27. Carderbee: APT Group use Legit Software in Supply Chain Attack Targeting Orgs in Hong Kong

    Malpedia library date ORKL

    Archived copy on ORKL Details

  28. RedHotel: A Prolific, Chinese State-Sponsored Group Operating at a Global Scale

    Malpedia library date ORKL

    Archived copy on ORKL Details

  29. The Spies Who Loved You: Infected USB Drives to Steal Secrets | Mandiant

    Malpedia library date ORKL

    Archived copy on ORKL Details

  30. Chinese Threat Actors Targeting Europe in SmugX Campaign

    Malpedia library date ORKL

    Archived copy on ORKL Details

  31. Lancefly: Group Uses Custom Backdoor to Target Orgs in Government, Aviation, Other Sectors

    Malpedia library date ORKL

    Archived copy on ORKL Details

  32. New Mustang Panda’s campaing against Australia

    Malpedia library date ORKL

    Archived copy on ORKL Details

  33. Botconf2022-19-FaouCoteCyr.pdf

    Malpedia library date ORKL

    Archived copy on ORKL Details

  34. With KEYPLUG, China’s RedGolf Spies On, Steals From Wide Field of Targets

    Malpedia library date ORKL

    Archived copy on ORKL Details

  35. PlugX Malware Being Distributed via Vulnerability Exploitation

    Malpedia library date ORKL

    Archived copy on ORKL Details

  36. Investigating the PlugX Trojan Disguised as a Legitimate Windows Debugger Tool

    Malpedia library date ORKL

    Archived copy on ORKL Details

  37. Mustang Panda APT Group Uses European Commission-Themed Lure to Deliver PlugX Malware

    Malpedia library date ORKL

    Archived copy on ORKL Details

  38. Chinese PlugX Malware Hidden in Your USB Devices?

    Malpedia library date ORKL

    Archived copy on ORKL Details

  39. JSAC2023_2_LT4.pdf

    Malpedia library date ORKL

    Archived copy on ORKL Details

  40. [QuickNote] Another nice PlugX sample

    Malpedia library date ORKL

    Archived copy on ORKL Details

  41. Diving into a PlugX sample of Mustang Panda group

    Malpedia library date ORKL

    Archived copy on ORKL Details

  42. RedDelta Targets European Government Organizations and Continues to Iterate Custom PlugX Variant

    Malpedia library date ORKL

    Archived copy on ORKL Details

  43. Secure Communications Blog

    Malpedia library date ORKL

    Archived copy on ORKL Details

  44. Hitching a ride with Mustang Panda

    Malpedia library date ORKL

    Archived copy on ORKL Details

  45. PlugXローダーの進化

    Malpedia library date ORKL

    Archived copy on ORKL Details

  46. Secure Communications Blog

    Malpedia library date ORKL

    Archived copy on ORKL Details

  47. The Rise of Earth Aughisky: Tracking the Campaigns Taidoor Started

    date in the CCS '25 data Kaspersky ORKLCCS '25 data

    The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Details

  48. Witchetty: Group Uses Updated Toolset in Attacks on Governments in Middle East

    Malpedia library date ORKL

    Archived copy on ORKL Details

  49. Hunting for Unsigned DLLs to Find APTs

    Malpedia library date ORKL

    Archived copy on ORKL Details

  50. Dissecting PlugX to Extract Its Crown Jewels

    Malpedia library date Ido Naor ORKL

    Archived copy on ORKL Details

  51. New Wave of Espionage Activity Targets Asian Governments

    Malpedia library date ORKL

    Archived copy on ORKL Details

  52. MustangPanda%20-%20Enemy%20at%20the%20gate_final.pdf

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  53. THREAT ANALYSIS REPORT: PlugX RAT Loader Evolution

    Malpedia library date ORKL

    Archived copy on ORKL Details

  54. Attacks on industrial control systems using ShadowPad | Kaspersky ICS CERT EN

    Malpedia library date ORKL

    Archived copy on ORKL Details

  55. Operation Earth Berberoka: An Analysis of a Multivector and Multiplatform APT Campaign Targeting Online Gambling Sites

    Malpedia library date ORKL

    Archived copy on ORKL Details

  56. China-based APT Mustang Panda might still have continued their attack activities against organizations in

    Malpedia library date VinCSS ORKLCCS '25 data

    Archived copy on ORKL Details

  57. Space Pirates: analyzing the tools and connections of a new hacker group

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  58. HUI Loaderの分析 - JPCERT/CC Eyes

    Malpedia library date ORKL

    Archived copy on ORKL Details

  59. AS-22-LeonSilvia-NextGenPlugXShadowPad.pdf

    Malpedia library date ORKL

    Archived copy on ORKL Details

  60. Mustang Panda deploys a new wave of malware targeting Europe

    Malpedia library date ORKL

    Archived copy on ORKL Details

  61. Moshen Dragon’s Triad-and-Error Approach | Abusing Security Software to Sideload PlugX and ShadowPad

    Malpedia library date ORKL

    Archived copy on ORKL Details

  62. Chinese APT Bronze President Mounts Spy Campaign on Russian Military

    Malpedia library date ORKL

    Archived copy on ORKL Details

  63. yir-cyber-threats-annex-download.pdf

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  64. Botconf2022-40-LunghiHorejsi.pdf

    Malpedia library date ORKL

    Archived copy on ORKL Details

  65. https://documents.trendmicro.com/assets/txt/earth-berberoka-windows-iocs-2.txt

    Malpedia library date ORKL

    Archived copy on ORKL Details

  66. New APT Group Earth Berberoka Targets Gambling Websites With Old and New Malware

    Malpedia library date ORKL

    Archived copy on ORKL Details

  67. Hacking activity of SectorB Group in 2021 – Red Alert

    Malpedia library date ORKL

    Archived copy on ORKL Details

  68. Ghidra script to handle stack strings – Max Kersten

    Malpedia library date ORKL

    Archived copy on ORKL Details

  69. Mustang Panda's Hodur : Vieux trucs, nouvelle variante de Korplug

    Malpedia library date ORKL

    Archived copy on ORKL Details

  70. Chinese APT Combines Fresh Hodur RAT with Complex Anti-Detection

    Malpedia library date ORKL

    Archived copy on ORKL Details

  71. New Mustang Panda hacking campaign targets diplomats, ISPs

    Malpedia library date ORKL

    Archived copy on ORKL Details

  72. Mustang Panda’s Hodur: Old tricks, new Korplug variant

    Malpedia library date ORKL

    Archived copy on ORKL Details

  73. Operation Dragon Castling: APT group targeting betting companies

    Malpedia library date ORKL

    Archived copy on ORKL Details

  74. TA416: Activity, Techniques, & Targeting Explained | Proofpoint US

    Malpedia library date ORKL

    Archived copy on ORKL Details

  75. Adam Kozy Testimony

    Malpedia library date Adam Kozy ORKL

    Archived copy on ORKL Details

  76. A “GULP” of PlugX

    Malpedia library date ORKL

    Archived copy on ORKL Details

  77. Threat Spotlight: BlackMatter, LockBit, and THOR - Cisco Umbrella

    Malpedia library date ORKL

    Archived copy on ORKL Details

  78. Microsoft Word - exorcist whitepaper.docx

    Malpedia library date ORKL

    Archived copy on ORKL Details

  79. 4 Chinese APT Groups Identified Targeting Mail Server of Afghan Telecommunications Firm Roshan

    date in the CCS '25 data Recorded Future CCS '25 data

    The original link failed its last check. Details

  80. Indonesian intelligence agency compromised in suspected Chinese hack

    Malpedia library date ORKL

    Archived copy on ORKL Details

  81. D1T1%20-%20%20ShadowPad%20-%20A%20Masterpiece%20of%20Privately%20Sold%20Malware%20in%20Chinese%20Espionage%20-%20Yi-Jhen%20Hsieh%20&%20Joey%20Chen.pdf

    Malpedia library date ORKL

    Archived copy on ORKL Details

  82. THOR: Previously Unseen PlugX Variant Deployed During Microsoft Exchange Server Attacks by PKPLUG Group

    Malpedia library date ORKL

    Archived copy on ORKL Details

  83. LuminousMoth – PlugX, File Exfiltration and Persistence Revisited

    Malpedia library date ORKL

    Archived copy on ORKL Details

  84. Threat Activity Group RedFoxtrot Linked to China’s PLA Unit 69010; Targets Bordering Asian Countries

    Malpedia library date ORKL

    Archived copy on ORKL Details

  85. RedDelta PlugX Undergoing Changes and Overlapping Again with Mustang Panda PlugX Infrastructure

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  86. Mustang Panda PlugX - 45.251.240.55 Pivot

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  87. PowerPoint 簡報

    Malpedia library date ORKL

    Archived copy on ORKL Details

  88. RedEcho group parks domains after public exposure

    Malpedia library date ORKL

    Archived copy on ORKL Details

  89. Exchange servers under siege from at least 10 APT groups

    Malpedia library date ORKL

    Archived copy on ORKL Details

  90. China-Linked Group RedEcho Targets the Indian Power Sector Amid Heightened Border Tensions

    Malpedia library date ORKL

    Archived copy on ORKL Details

  91. Cyber Threats 2020: A Year in Retrospect

    Malpedia library date ORKL

    Archived copy on ORKL Details

  92. Report2021GTR.pdf

    Malpedia library date ORKL

    Archived copy on ORKL Details

  93. Investigation into PlugX Uncovers Unique APT Technique

    Malpedia library date ORKL

    Archived copy on ORKL Details

  94. CRACKING A SOFT CELL IS HARDER THAN YOU THINK

    Malpedia library date ORKL

    Archived copy on ORKL Details

  95. Higaisa or Winnti? APT41 backdoors, old and new

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  96. China's APT hackers move to ransomware attacks

    Malpedia library date ORKL

    Archived copy on ORKL Details

  97. Operation StealthyTrident: corporate software under attack

    Malpedia library date ORKL

    Archived copy on ORKL Details

  98. APT group targeting governmental agencies in East Asia

    Malpedia library date ORKL

    Archived copy on ORKL Details

  99. TA416's Golang PlugX Malware Loader | Proofpoint US

    Malpedia library date ORKL

    Archived copy on ORKL Details

  100. Weaponizing Open Source Software for Targeted Attacks

    Malpedia library date ORKL

    Archived copy on ORKL Details

  101. APT trends report Q3 2020

    Malpedia library date ORKL

    Archived copy on ORKL Details

  102. VB2020-20.pdf

    Malpedia library date ORKL

    Archived copy on ORKL Details

  103. VB2020 paper: Operation LagTime IT: colourful Panda footprint

    Malpedia library date ORKL

    Archived copy on ORKL Details

  104. APT41: Indictments Put Chinese Espionage Group in the Spotlight

    Malpedia library date Symantec ORKLCCS '25 data

    Archived copy on ORKL Details

  105. Back Despite Disruption: RedDelta Resumes Operations

    Malpedia library date Insikt Group® ORKL

    Archived copy on ORKL Details

  106. Research Roundup: Activity on Previously Identified APT33 Domains | ThreatConnect

    Malpedia library date ThreatConnect ORKLCCS '25 data

    Archived copy on ORKL Details

  107. ESET_Threat_Report_Q22020.pdf

    Malpedia library date ORKL

    Archived copy on ORKL Details

  108. APT trends report Q2 2020

    Malpedia library date ORKL

    Archived copy on ORKL Details

  109. What even is Winnti? - Risky Business Media

    Malpedia library date ORKL

    Archived copy on ORKL Details

  110. Chinese state hackers target Hong Kong Catholic Church

    Malpedia library date ORKL

    Archived copy on ORKL Details

  111. Accenture | Let there be change

    Malpedia library date ORKL

    Archived copy on ORKL Details

  112. Cycldek: Bridging the (air) gap

    Malpedia library date ORKL

    Archived copy on ORKL Details

  113. Mustang Panda Recent Activity: Dll-Sideloading trojans with temporal C2 servers

    Malpedia library date ORKL

    Archived copy on ORKL Details

  114. The energy reserves in the Eastern Mediterranean Sea and a malicious campaign of APT10 against Turkey

    Malpedia library date Lab52 ORKLCCS '25 data

    Archived copy on ORKL Details

  115. COVID-19 Themes Are Being Utilized by Threat Actors of Varying Sophistication

    Malpedia library date ORKL

    Archived copy on ORKL Details

  116. Phân tích mã độc lợi dụng dịch Covid-19 để phát tán giả mạo “Chỉ thị của thủ tướng Nguyễn Xuân Phúc” - Phần

    Malpedia library date ORKL

    Archived copy on ORKL Details

  117. Is APT 27 Abusing COVID-19 To Attack People !

    date in the CCS '25 data Yoroi CCS '25 data

    The original link failed its last check. Details

  118. Phân tích mã độc lợi dụng dịch Covid-19 để phát tán giả mạo “Chỉ thị của thủ tướng Nguyễn Xuân Phúc” - Phần 1 - VinCSS Blog

    Malpedia library date ORKL

    Archived copy on ORKL Details

  119. the adversary playbook for the long-standing espionage activity of a Chinese nation-state adversary

    Malpedia library date ORKL

    Archived copy on ORKL Details

  120. Operation DRBControl: Uncovering a Cyberespionage Campaign Targeting Gambling Companies in Southeast Asia

    Malpedia library date ORKL

    Archived copy on ORKL Details

  121. CLAMBLING - A New Backdoor Base On Dropbox (EN)

    Malpedia library date ORKL

    Archived copy on ORKL Details

  122. Cyber-Reports-2020-01-A-one-sided-Affair.pdf

    Malpedia library date ORKL

    Archived copy on ORKL Details

  123. Microsoft Word - Threat Intelligence and the Limits of Malware Analysis_smc1.docx

    Malpedia library date ORKL

    Archived copy on ORKL Details

  124. Rancor: Cyber Espionage Group Uses New Custom Malware to Attack Southeast Asia

    Malpedia library date ORKL

    Archived copy on ORKL Details

  125. Fresh PlugX October 2019

    Malpedia library date ORKL

    Archived copy on ORKL Details

  126. APT cases exploiting vulnerabilities in region‑specific software

    Malpedia library date ORKL

    Archived copy on ORKL Details

  127. Analytics

    Malpedia library date Positive Technologies ORKLCCS '25 data

    The original link failed its last check. Original publisher Details

  128. New threat group behind Airbus cyber attacks, claim researchers

    Malpedia library date ORKL

    Archived copy on ORKL Details

  129. PKPLUG: Chinese Cyber Espionage Group Attacking Southeast Asia

    Malpedia library date ORKL

    Archived copy on ORKL Details

  130. Operation Soft Cell: A Worldwide Campaign Against Telecommunications Providers

    file creation date Cybereason ORKL

    The link to Mirror on Box failed its last check. Mirror on Box Details

  131. Operation Soft Cell: A Worldwide Campaign Against Telecommunications Providers

    Malpedia library date ORKL

    Archived copy on ORKL Details

  132. OPERATION SOFT CELL- A WORLDWIDE CAMPAIGN AGAINST TELECOMMUNICATIONS PROVIDERS

    date in the title ORKL

    The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Details

  133. Operation Soft Cell_ A Worldwide Campaign Against Telecommunications Providers

    date in the CCS '25 data Cybereason ORKLCCS '25 data

    The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Details

  134. Into the Fog - The Return of ICEFOG APT

    Malpedia library date ORKL

    The title opens a link whose publisher is not confirmed. Archived copy on ORKL Details

  135. Uncovering New Activity By APT10 | FortiGuard Labs

    Malpedia library date ORKL

    Archived copy on ORKL Details

  136. mpressioncss_ta_report_2019.pdf

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  137. SectorM04 Targeting Singapore – An Analysis – Red Alert

    Malpedia library date ORKL

    Archived copy on ORKL Details

  138. Operation Red Signature Targets South Korean Companies

    Malpedia library date ORKL

    Archived copy on ORKL Details

  139. Malicious document targets Vietnamese officials

    Malpedia library date ORKL

    Archived copy on ORKL Details

  140. Malware Analysis – PlugX – Part 2

    Malpedia library date ORKL

    Archived copy on ORKL Details

  141. Time of death? A therapeutic postmortem of connected medicine

    Malpedia library date ORKL

    Archived copy on ORKL Details

  142. Malware Analysis – PlugX

    Malpedia library date ORKL

    Archived copy on ORKL Details

  143. PlugXと攻撃者グループ "DragonOK"の関連性 | LAC WATCH

    Malpedia library date ORKL

    Archived copy on ORKL Details

  144. Kingdom targeted by new malware

    Malpedia library date ORKL

    Archived copy on ORKL Details

  145. Kingdom targeted by new malware

    date in the title ORKL

    The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Details

  146. Updated KHRAT Malware Used in Cambodia Attacks

    Malpedia library date ORKL

    Archived copy on ORKL Details

  147. Paranoid PlugX

    Malpedia library date ORKL

    Archived copy on ORKL Details

  148. Blog | Arctic Wolf

    Malpedia library date ORKL

    Archived copy on ORKL Details

  149. Intrusions Affecting Multiple Victims Across Multiple Sectors | CISA

    Malpedia library date ORKL

    Archived copy on ORKL Details

  150. RedLeaves - Malware Based on Open Source RAT - JPCERT/CC Eyes

    Malpedia library date ORKL

    Archived copy on ORKL Details

  151. Trojanized Adobe installer used to install DragonOK’s new custom backdoor

    date in the title ORKL

    The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Details

  152. The Rambo Backdoor

    date in the title ORKL

    The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Details

  153. Deep Dive on the DragonOK Rambo Backdoor _ Morphick Cyber Security

    date in the CCS '25 data Morphisec ORKLCCS '25 data

    The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Details

  154. securitykitten.github.io/_posts/2017-02-15-the-rambo-backdoor.md at master · malware-kitten/securitykitten.github.io

    Malpedia library date ORKL

    Archived copy on ORKL Details

  155. DragonOK Updates Toolset and Targets Multiple Geographic Regions

    Malpedia library date ORKL

    Archived copy on ORKL Details

  156. DragonOK Updates Toolset and Targets Multiple Geographic Regions

    date in the title ORKL

    The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Details

  157. DragonOK Updates Toolset and Targets Multiple Geographic Regions

    date in the CCS '25 data Palo Alto Networks ORKLCCS '25 data

    The link to Mirror on Box failed its last check. Mirror on Box Details

  158. DragonOK Updates Toolset and Targets Multiple Geographic Regions

    Malpedia library date ORKL

    Archived copy on ORKL Details

  159. Unpacking the spyware disguised as antivirus | Malwarebytes Labs

    Malpedia library date ORKL

    Archived copy on ORKL Details

  160. security_report_20160613.pdf

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  161. CVE-2015-2545: overview of current threats - Securelist

    file creation date ORKL

    The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Details

  162. CVE-2015-2545: overview of current threats

    Malpedia library date ORKL

    Archived copy on ORKL Details

  163. CVE-2015-2545: overview of current threats

    date in the CCS '25 data Kaspersky ORKLCCS '25 data

    The link to Mirror on Box failed its last check. Mirror on Box Details

  164. CVE-2015-2545- overview of current threats

    date in the title ORKL

    The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Details

  165. Targeted Attack Distributes PlugX in Russia | Proofpoint US

    Malpedia library date ORKL

    Archived copy on ORKL Details

  166. 2015-09-20150911-280-CSIT-15085-NfLog.pdf

    Malpedia library date ORKL

    Archived copy on ORKL Details

  167. Uncovering the Seven Pointed Dagger

    Malpedia library date Arbor Networks ORKLCCS '25 data

    The link to Mirror on Box failed its last check. Mirror on Box Details

  168. Watering Hole Attack on Aerospace Firm Exploits CVE-2015-5122 to Install IsSpace Backdoor - Palo Alto Networks BlogPalo Alto Networks Blog

    date in the CCS '25 data Palo Alto ORKLCCS '25 data

    The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Details

  169. Watering Hole Attack on Aerospace Firm Exploits CVE-2015-5122 to Install IsSpace Backdoor

    Malpedia library date ORKL

    Archived copy on ORKL Details

  170. Unit 42 Identifies New DragonOK Backdoor Malware Deployed Against Japanese Targets

    Malpedia library date ORKL

    Archived copy on ORKL Details

  171. Unit 42 Identifies New DragonOK Backdoor Malware Deployed Against Japanese Targets

    date in the title ORKL

    The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Details

  172. Unit 42 Identifies New DragonOK Backdoor Malware Deployed Against Japanese Targets

    Malpedia library date ORKL

    Archived copy on ORKL Details

  173. OPERATION QUANTUM ENTANGLEMENT

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  174. Operation Quantum Entanglement

    date in the CCS '25 data FireEye ORKLCCS '25 data

    The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Details

  175. BKDR_RARSTONE: New RAT to Watch Out For - TrendLabs Security Intelligence Blog

    Malpedia library date ORKL

    The title opens Wayback Machine, not the publisher’s page. Archived copy on ORKL Details

Newest first. Details opens the report in Explore.