Daggerfly
- ID
- G1034
- Associated names
- Evasive Panda, BRONZE HIGHLAND
- Source
- attack.mitre.org
- MITRE last modified
- 1 Aug 2026
Daggerfly is a People's Republic of China-linked APT entity active since at least 2012. Daggerfly has targeted individuals, government and NGO entities, and telecommunication companies in Asia and Africa. Daggerfly is associated with exclusive use of MgBot malware and is noted for several potential supply chain infection campaigns.[1][2][3][4]
Techniques used (17)
- T1003.002 Security Account Manager
- T1012 Query Registry
- T1036.003 Rename Legitimate Utilities
- T1053.005 Scheduled Task
- T1059.001 PowerShell
- T1071.001 Web Protocols
- T1082 System Information Discovery
- T1105 Ingress Tool Transfer
- T1136.001 Local Account
- T1189 Drive-by Compromise
- T1195.002 Compromise Software Supply Chain
- T1204.001 Malicious Link
- T1218.011 Rundll32
- T1553.002 Code Signing
- T1574.001 DLL
- T1584.004 Server
- T1587.002 Code Signing Certificates