Moshen Dragon
Moshen Dragon is a China-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets 3 sectors, including Government, and Defense and Aerospace, in 4 countries, including India and Pakistan.
- Nomad Panda
- TEMP.Trident
- Origin
- China
- Techniques
- 0
- Exploited CVEs
- No CVE data
- First seen
- Jan 1, 2014
- Record updated
Who They Target.
About Moshen Dragon.
Moshen Dragon is a Chinese-aligned cyberespionage threat actor operating in Central Asia. They have been observed deploying multiple malware triads and utilizing DLL search order hijacking to sideload ShadowPad and PlugX variants. The threat actor also employs various tools, including an LSA notification package and a passive backdoor known as GUNTERS. Their activities involve targeting the telecommunication sector and leveraging Impacket for lateral movement and data exfiltration.
Last updated Sep 11, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.