Skip to content
skopnix
← Adversaries

File · Moafee · Unknown · refreshed 2026-10-18

Moafee

MITRE G0002 ↗

Moafee — ATT&CK roseMO

attack rose · 1 techniques across 1 tactics

Analyst brief

Moafee is a threat group that appears to operate from the Guandong Province of China. Due to overlapping TTPs, including similar custom tools, Moafee is thought to have a direct or indirect relationship with the threat group DragonOK.

Kill chain

MITRE ATT&CK Enterprise · tap a technique

1 techniques · 1 of 15 tactics

  1. Stealth

    1 technique

select a technique

Arsenal

1 malware
Malware
Malware · 1ATT&CK
PoisonIvyS0012 ↗

as stated by MITRE ATT&CK · “shared by” counts roster dossiers citing the same S-id

Take it with you

keyless · no signup

References

2 sources
  1. 1.attack.mitre.org/groups/G0002
  2. 2.fireeye.com/blog/threat-research/2014/09/the-path-to-mass-producin…

Track Moafee on the wire.

This dossier is already data: the keyless actor API and a STIX 2.1 bundle. Mentions on the wire reach Telegram and RSS as they land.

Follow on TelegramKEV RSSAPI

Check your stack

Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.

Stack checkNo key. No signup.