自动化接入 · API / MCP EN

组织档案 · G0074

Dragonfly 2.0

Dragonfly 2.0 is a suspected Russian group that has targeted government entities and multiple U.S. critical infrastructure sectors since at least December 2015. There is debate over the extent of overlap between Dragonfly 2.0 and Dragonfly, but there is sufficient evidence to lead to these being tracked as two separate groups.

ATT&CK G0074 置信带 高 · 100 来源 src_mitre_attck_enterprise 状态 active

Dragonfly 2.0 is a suspected Russian group that has targeted government entities and multiple U.S. critical infrastructure sectors since at least December 2015. 1 2 There is debate over the extent of overlap between Dragonfly 2.0 and Dragonfly, but there is sufficient evidence to lead to these being tracked as two separate groups. 34

  1. US-CERT TA18-074A
  2. Symantec Dragonfly Sept 2017
  3. Fortune Dragonfly 2.0 Sept 2017
  4. Dragos DYMALLOY

断言与引用

每条断言来自写入方；provenance 是写入方声称，不是本目录的复核结论。有效期按引用年份读取。

predicateobject有效期置信证据
also_known_asDragonfly 2.0— → …100src_mitre_attck_enterprise
also_known_asIRON LIBERTY— → …100src_mitre_attck_enterprise
also_known_asDYMALLOY— → …100src_mitre_attck_enterprise
also_known_asBerserk Bear— → …100src_mitre_attck_enterprise

技术使用

尚无技术使用记录；ATT&CK 同步后按引用年份出现。

别名

Berserk Bear · Dragonfly 2.0 · DYMALLOY · IRON LIBERTY

读取与复核

记录自动入库·未人工复核。置信度是写入方给出的 0–100 值，置信带按 ≥80 / 50–79 / <50 划为高 / 中 / 低；四条信任轴（合成、生命周期、置信带、佐证源数）分开呈现，不合并为单一信任分。

纠错