Aoqin Dragon

MISP
Type:
Unknown
Country:
CN
First seen:
Unknown
Details:

[Aoqin Dragon](https://attack.mitre.org/groups/G1007) is a suspected Chinese cyber espionage threat group that has been active since at least 2013. [Aoqin Dragon](https://attack.mitre.org/groups/G1007) has primarily targeted government, education, and telecommunication organizations in Australia, Cambodia, Hong Kong, Singapore, and Vietnam. Security researchers noted a potential association between [Aoqin Dragon](https://attack.mitre.org/groups/G1007) and UNC94, based on malware, infrastructure, and targets.(Citation: SentinelOne Aoqin Dragon June 2022)

MITRE ATT&CK: View on MITRE
Techniques Used (9)
ID ATT&CK Tactics
T1027.002 Software Packing -
T1036 Masquerading -
T1083 File and Directory Discovery -
T1091 Replication Through Removable Media -
T1203 Exploitation for Client Execution -
T1204.002 Malicious File -
T1570 Lateral Tool Transfer -
T1587.001 Malware -
T1588.002 Tool -
References (2)
Aliases (103)
UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94 UNC94
Related Malware (2)
Heyoka Backdoor
other
Mongall
other
Metadata
ID: 393
Created: 13/01/2026 17:48
Updated: 06/03/2026 04:00