Threat Actor
Moafee
Also known as: Moafee
Moafee is a threat group that appears to operate from the Guandong Province of China. Due to overlapping TTPs, including similar custom tools, Moafee is thought to have a direct or indirect relationship with the threat group DragonOK.
1
Techniques
1
Software
0
indicators on this record
Properties
- Last source
- MITRE ATT&CK
- STIX ID
- intrusion-set--2e5d3a83-fe00-41a5-9b60-237efc84832f
- In Signal since
- initial import (Sep 2026)
- Retrieved at
- 2026-11-01T16:36:58+00:00
- Type
- intrusion-set
MITRE ATT&CK Techniques (1)
▸
Binary Padding (T1027.001)
Adversaries may use binary padding to add junk data and change the on-disk representation of malware. This can be done without affecting the functiona
Software & Tools (1)
▸
PoisonIvy [malware]
PoisonIvy is a popular remote access tool (RAT) that has been used by many groups.(Citation: FireEye Poison
Explore this actor's full graph with Ninja Signal