Mofang
- ID
- G0103
- Source
- attack.mitre.org
- MITRE last modified
- 1 Aug 2026
Mofang is a likely China-based cyber espionage group, named for its frequent practice of imitating a victim's infrastructure. This adversary has been observed since at least May 2012 conducting focused attacks against government and critical infrastructure in Myanmar, as well as several other countries and sectors including military, automobile, and weapons industries.[1]
Techniques used (6)
- T1027.013 Encrypted/Encoded File
- T1027.015 Compression
- T1204.001 Malicious Link
- T1204.002 Malicious File
- T1566.001 Spearphishing Attachment
- T1566.002 Spearphishing Link