DragonOK
No sourced public emblem in this profile.
reference profile · reported nexus: CN (not nationality)
Threat group that has targeted Japanese organizations with phishing emails. Due to overlapping TTPs, including similar custom tools, DragonOK is thought to have a direct or indirect relationship with the threat group Moafee. 2223 It is known to use a variety of malware, including Sysget/HelloBridge, PlugX, PoisonIvy, FormerFirstRat, NFlog, and NewCT.
Source-reported aliases: Moafee, BRONZE OVERBROOK, G0017, G0002, Shallow Taurus. Associations do not prove equivalence.
Target geography
Catalog-listed countries (associations, not attack counts): 
United States of America
No bound claim-post feed for this label.
Historical casebook
No dated record curated yet; absence does not establish inactivity.
Planned Kinwilder coverage
Tentative editorial review windows, contingent on evidence and review; not promised publication dates or predictions of attacks.
No assigned review window.
References
https://attack.mitre.org/wiki/Groups
https://www.cfr.org/interactive/cyber-operations/moafee
https://www.phnompenhpost.com/national/kingdom-targeted-new-malware
https://attack.mitre.org/groups/G0017/
https://attack.mitre.org/groups/G0002/
https://www.secureworks.com/research/threat-profiles/bronze-overbrook
https://unit42.paloaltonetworks.com/atoms/shallowtaurus/