All actors

Operation DRBControl

Linked to China by two sources.

Reports
20
Last reported
Known CVEs
13
Origin
China
ID
operation-drbcontrol
Sources
MISPMalpedia
Merge evidence
1 alias match

Reports per quarter

  1. 2020 Q1: 7 reports
  2. 2020 Q2: 1 report
  3. 2020 Q3: no reports
  4. 2020 Q4: no reports
  5. 2021 Q1: no reports
  6. 2021 Q2: 5 reports
  7. 2021 Q3: no reports
  8. 2021 Q4: no reports
  9. 2022 Q1: no reports
  10. 2022 Q2: 3 reports
  11. 2022 Q3: 2 reports
  12. 2022 Q4: 2 reports
Dated reports, 2020 Q1 to 2022 Q4.

CVEs named in reports

Show all 13 CVEs Show fewer

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

  1. Iron Tiger Compromises Chat Application Mimi, Targets Windows, Mac, and Linux Users

    date in the CCS '25 data Trend Micro fromORKLCCS '25 data

  2. PowerPoint Presentation

    Malpedia library date Hughes, Jennifer fromORKLCCS '25 data

  3. Iron Tiger APT Updates Toolkit With Evolved SysUpdate Malware

    date in the CCS '25 data SecureWorks fromORKLCCS '25 data

Show all 20 reports Show fewer
  1. Shadows in the Rain

    date in the title fromORKL

  2. CLAMBLING - A New Backdoor Base On Dropbox

    date in the title fromORKL

  3. CLAMBLING - A New Backdoor Base On Dropbox (EN)

    date in the CCS '25 data Trend Micro fromORKLCCS '25 data

Newest first. Details opens the report in Explore.