APT Explorer

All actors

Operation Dragon Castling

Linked to China by one source.

Reports
7
Last reported
Known CVEs
1
Origin
China
ID
operation-dragon-castling
Sources
ETDA
Merge evidence
0 alias matches

Reports per quarter

Dated reports, 2022 Q1 to 2026 Q2.

CVEs named in reports

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

  1. Operation Dragon Castling: APT group targeting betting companies

    date ORKL added it ORKL

    Archived copy on ORKL Details

  2. Autodial(DLL)ing Your Way - MDSec

    date ORKL added it ORKL

    Archived copy on ORKL Details

  3. Operation Dragon Castling- APT group targeting betting companies

    date in the title ORKL

    The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Details

  4. Operation Dragon Castling: APT group targeting betting companies

    date in the CCS '25 data Avast ORKLCCS '25 data

    The link to Mirror on Box failed its last check. Mirror on Box Details

  5. Operation Dragon Castling: APT group targeting betting companies

    Malpedia library date ORKL

    Archived copy on ORKL Details

  6. IoC from Operation Dragon Castling

    date in the title ORKL

    The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Details

  7. ioc/OperationDragonCastling at master · gendigitalinc/ioc

    Malpedia library date ORKL

    Archived copy on ORKL Details

Newest first. Details opens the report in Explore.