APT Explorer

All actors

Aoqin Dragon

Also reported as UNC94. Linked to China by three sources.

Reports
4
Last reported
Known CVEs
3
Techniques in ATT&CK
9
Origin
China
ID
G1007
Sources
ATT&CKMISPETDAMalpedia
Merge evidence
5 alias matches

Reports per quarter

Dated reports, 2022 Q2 to 2026 Q2.

Techniques in ATT&CK

Listed by ATT&CK

No report from the last two years names a technique ID.

CVEs named in reports

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

  1. What are State Sponsored Cyber Attacks? - Detailed Guide

    date ORKL added it ORKL

    Archived copy on ORKL Details

  2. CB_941_Canhbao_APT_36c5a857fa.pdf

    Malpedia library date Socialist Republic of Vietnam ORKLCCS '25 data

    The original link failed its last check. Original publisher Details

  3. Aoqin Dragon | Newly-Discovered Chinese-linked APT Has Been Quietly Spying On Organizations For 10 Years

    Malpedia library date SentinelOne ORKLCCS '25 data

    Archived copy on ORKL Details

  4. Aoqin Dragon - Newly-Discovered Chinese-linked APT Has Been Quietly Spying On Organizations For 10 Years

    date in the title ORKL

    The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Details

Newest first. Details opens the report in Explore.