Skip to content
Nation-state APTEspionageIntermediate sophistication

Nuo Chong Lions

Nuo Chong Lions is a Saudi Arabia-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets the Civil Society and NGOs sector. It uses 4 MITRE ATT&CK techniques.

Also known as
  • Silencer Lions
Techniques
4
Exploited CVEs
No CVE data
First seen
Feb 28, 2020
Last seen
Feb 28, 2020
Record updated

Who They Target.

How They Operate · MITRE ATT&CK.

4 techniques across 2 of 14 tactics

Reconnaissance·

Resource Development·

Initial Access2

T1189
Drive-by Compromise
T1566.002
Phishing: Spearphishing Link

Execution·

Persistence·

Privilege Escalation·

Defense Evasion2

T1027
Obfuscated Files or Information
T1036.005
Masquerading: Match Legitimate Resource Name or Location

Credential Access·

Discovery·

Lateral Movement·

Collection·

Command and Control·

Exfiltration·

Impact·

Arsenal · Malware And Tools.

  • AndroRATmalware
  • DroidJackmalware
  • MobiHokmalware
  • SpyNotemalware

Campaigns.

  1. Nuo Chong Lions 2015-2018 Multi-Platform Mobile Surveillance CampaignFeb 2020

Indicators Of Compromise.

TLP:AMBER

37 indicators on the Brandefense platform

IP, domain and hash indicators · YARA rules · ATT&CK Navigator export

Request A Demo

About Nuo Chong Lions.

A state-sponsored threat group associated with Saudi Arabia focused on monitoring, discrediting, and silencing political dissidents, critics, and Shia commentators through information operations, insider access, and mobile RAT deployments.

Last updated Oct 19, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.