OPERATION QUANTUM ENTANGLEMENT

The FireEye report analyzes two related APT campaigns—Moafee (Guangdong) and DragonOK (Jiangsu)—that targeted government, military, high-tech and manufacturing organizations across East Asia and the US defense sector. The actors used a common toolkit (CT/NewCT/NewCT2, Nflog, Mongall, PoisonIvy, Sysget/HelloBridge) and operational practices (HTRAN proxying, environment checks, password-protected decoys, large null-padded payloads) to maintain stealth and persistence; the report provides technical IoCs, network beacon formats, sample hashes, and evidence used for geographic attribution.