Mofang

APT / StateG0103
Origin🇨🇳 China
Techniques (MITRE ATT&CK)6
SourceMITRE ATT&CK
State sponsor: ChinaAttribution confidence: 50%Target categories: Government, Private sector
Targeted regions: Myanmar · Germany · Singapore · Canada · India · United States · South Korea
Also known as:BRONZE WALKERSuperman

Vexday analysis

Mofang é um grupo de espionagem cibernética de provável origem chinesa, identificado no MITRE ATT&CK como G0103, conhecido pela prática recorrente de imitar a infraestrutura de suas vítimas. O grupo é observado desde pelo menos maio de 2012, conduzindo ataques direcionados contra governo e infraestrutura crítica em Mianmar, além de outros países e setores como indústrias militar, automobilística e de armamentos. Ao grupo são atribuídas 6 técnicas documentadas na base MITRE ATT&CK.

Attack chain

Plausible scenario built from the group's real techniques, ordered by the phases of an attack. Each step shows how the group typically operates.

Arsenal severity11
Impact: High
T1566.001ENTRYInitial accessSpearphishingAttachmentEXECExecutionMalicious Link

Illustrative chain derived from techniques documented in MITRE ATT&CK — it does not represent a specific past attack. Severity summarizes the known arsenal (kill-chain coverage, actively exploited CVEs, techniques).

Techniques (MITRE ATT&CK) 6

How the group operates, mapped to the MITRE ATT&CK matrix and organized by the phases of an attack.

Exploited vulnerabilities

No CVEs attributed to this group in public sources (MITRE ATT&CK). Absence of attribution does not mean absence of activity.

Mofang uses real techniques and exploits real flaws. TrueHacking's AI Autonomous Pentest simulates these attacks against your infrastructure and brings more security to your application.

Explore the AI Autonomous Pentest →