Threat Group Cards: A Threat Actor Encyclopedia

APT group: Operation Dragon Castling

Names	Operation Dragon Castling (ESET)
Country	China
Motivation	Information theft and espionage
First seen	2022
Description	(ESET) We recently discovered an APT campaign we are calling Operation Dragon Castling. The campaign is targeting what appears to be betting companies in South East Asia, more specifically companies located in Taiwan, the Philippines, and Hong Kong. With moderate confidence, we can attribute the campaign to a Chinese speaking APT group, but unfortunately cannot attribute the attack to a specific group and are not sure what the attackers are after.
Observed	Sectors: Casinos and Gambling. Countries: Hong Kong, Philippines, Taiwan.
Tools used
Information	<https://decoded.avast.io/luigicamastra/operation-dragon-castling-apt-group-targeting-betting-companies/>

Last change to this card: 04 April 2022

Download this actor card in PDF or JSON format

Previous: Operation Domino, Operation Kremlin
Next: Operation DRBControl