DragonOK is a threat actor attributed to CN, also known as Moafee, BRONZE OVERBROOK, Bronze Overbrook. This group is tracked in the Strobes VI threat intelligence database.

What vulnerabilities does DragonOK exploit?

DragonOK is known to exploit 1 CVEs. View the full list on the Strobes VI threat actor profile page.

Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives

PoC for every finding

30+ tools orchestrated

Book a Demo Learn More

Setup in 5 minutesSOC 2 & ISO 27001

DragonOK

Also known as: Moafee, BRONZE OVERBROOK, Bronze Overbrook, Shallow Taurus, G0002, G0017

CNInformation theft and espionage

Exploited CVEs

Overview

Threat group that has targeted Japanese organizations with phishing emails. Due to overlapping TTPs, including similar custom tools, DragonOK is thought to have a direct or indirect relationship with the threat group Moafee. 2223 It is known to use a variety of malware, including Sysget/HelloBridge, PlugX, PoisonIvy, FormerFirstRat, NFlog, and NewCT.

Exploited Vulnerabilities

CVE ID	Action
CVE-2015-1641	View Details