Moafee

Moafee is a threat group that appears to operate from the Guandong Province of China. Due to overlapping TTPs, including similar custom tools, Moafee is thought to have a direct or indirect relationship with the threat group DragonOK.

 Alternate names
n/a

Moafee is an advanced persistent threat (APT) that has been active since at least 2013, targeting government agencies and organizations in various countries including Iran, Iraq, Saudi Arabia, Qatar, Kuwait, the United States, and Germany. Moafee uses a variety of tactics to gain access to its targets' networks, such as spear-phishing emails or exploiting vulnerabilities in software. Once inside, it can steal sensitive information, monitor network activity, and launch further attacks on other systems within the same network. The group behind Moafee is still active today, continuing to target government agencies and organizations around the world.

Techniques, tactics and practices:

Moafee uses a variety of tactics to gain access to its targets' networks, such as spear-phishing emails or exploiting vulnerabilities in software. Once inside, it can steal sensitive information, monitor network activity, and launch further attacks on other systems within the same network. The group behind Moafee is still active today, continuing to target government agencies and organizations around the world.