Night Dragon
Campaign · ATTACK:enterprise:C0002
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:C0002",
"title": "Night Dragon",
"type": "Campaign",
"source_url": "https://attack.mitre.org/campaigns/C0002",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "campaign--ae407e32-87e0-4d92-8705-3ae25d504d8a",
"external_id": "C0002",
"domain": "enterprise",
"created": "2022-09-08T13:31:37.391Z",
"modified": "2026-07-31T18:47:29.891Z",
"version": "1.1",
"aliases": [
"Night Dragon"
],
"tactics": [
],
"source_references": [
{
"source_name": "McAfee Night Dragon",
"url": "https://scadahacker.com/library/Documents/Cyber_Events/McAfee%20-%20Night%20Dragon%20-%20Global%20Energy%20Cyberattacks.pdf"
}
]
}Explicit source assertions (34)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:C0002 → uses → ATTACK:enterprise:T1078.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--09c0322c-a714-4768-9d30-04160d2d7b2a
McAfee Night DragonATTACK:enterprise:C0002 → uses → ATTACK:enterprise:S0008
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--09d53bfd-3a67-48f3-acba-385950defb50
McAfee Night DragonATTACK:enterprise:C0002 → uses → ATTACK:enterprise:T1608.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0a49a3af-973d-43ea-b4d4-8cc21c12dfc0
McAfee Night DragonATTACK:enterprise:C0002 → uses → ATTACK:enterprise:T1588.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--113fbb20-8dd7-4ba6-b5a8-486e46d9abeb
McAfee Night DragonATTACK:enterprise:C0002 → uses → ATTACK:enterprise:S0073
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--152e1225-7b28-4954-85f1-ebd4300b6ab6
McAfee Night DragonATTACK:enterprise:C0002 → uses → ATTACK:enterprise:S0350
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--19be7e10-9dab-45d1-acf4-acba7dfb6d10
McAfee Night DragonATTACK:enterprise:C0002 → uses → ATTACK:enterprise:T1566.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1e3438f9-573c-4912-81e7-650094af62ac
McAfee Night DragonATTACK:enterprise:C0002 → uses → ATTACK:enterprise:T1204.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1fdcaa51-4445-43be-99eb-52787756fa1c
McAfee Night DragonATTACK:enterprise:C0002 → uses → ATTACK:enterprise:T1133
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--21fdb8cc-baed-4b9a-871e-f74dc0f0f2d9
McAfee Night DragonATTACK:enterprise:C0002 → uses → ATTACK:enterprise:T1005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3173f84e-783b-43cd-95f7-b74277936b4d
McAfee Night DragonATTACK:enterprise:C0002 → uses → ATTACK:enterprise:T1059.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3a693ff6-1969-443b-8eb4-bb2ad56f0dba
McAfee Night DragonATTACK:enterprise:C0002 → uses → ATTACK:enterprise:T1027.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3be6aadd-ea5f-4910-a8a0-d1019977dc43
McAfee Night DragonATTACK:enterprise:C0002 → uses → ATTACK:enterprise:T1190
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3c695c3d-7f8e-43dd-baad-b2afdfc86fc2
McAfee Night DragonATTACK:enterprise:C0002 → uses → ATTACK:enterprise:T1078
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3e1585d9-d6dc-4016-8cba-53ca08b7887e
McAfee Night DragonATTACK:enterprise:C0002 → uses → ATTACK:enterprise:T1027.013
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--41c20ce1-3b9d-4293-a203-a4196d307c59
McAfee Night DragonATTACK:enterprise:C0002 → uses → ATTACK:enterprise:T1033
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5014ae85-9335-40df-b03b-bc08964d4ff7
McAfee Night DragonATTACK:enterprise:C0002 → uses → ATTACK:enterprise:T1588.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--644bfb9b-0555-45e9-a967-c6bedcc05e88
McAfee Night DragonATTACK:enterprise:C0002 → uses → ATTACK:enterprise:T1112
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--66a7d5ae-7975-448d-ae40-b0786a3a8cd6
McAfee Night DragonATTACK:enterprise:C0002 → uses → ATTACK:enterprise:T1003.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--791d8691-7e06-4052-8c49-1a9f57ccf09d
McAfee Night DragonATTACK:enterprise:C0002 → uses → ATTACK:enterprise:T1071.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7ac258e9-acfa-4bc4-a676-201cf40be956
McAfee Night DragonATTACK:enterprise:C0002 → uses → ATTACK:enterprise:T1114.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--90839ffa-293e-4fe3-98d2-e8edfd55be2c
McAfee Night DragonATTACK:enterprise:C0002 → uses → ATTACK:enterprise:T1008
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9b4a4f3b-d8f4-47d2-8e63-2687c566806b
McAfee Night DragonATTACK:enterprise:C0002 → uses → ATTACK:enterprise:S0110
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a4d7be79-1cb7-4009-84d0-165cb6c7fcc6
McAfee Night DragonATTACK:enterprise:C0002 → uses → ATTACK:enterprise:T1685
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a87a895a-406b-4051-b1fe-dc1fa64bf946
McAfee Night DragonATTACK:enterprise:C0002 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b0a6695b-e5ab-47b3-adfd-4db09c41457e
McAfee Night DragonATTACK:enterprise:C0002 → uses → ATTACK:enterprise:T1583.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b4ae0cf8-ad1f-4813-9e07-fc3faba1454e
McAfee Night DragonATTACK:enterprise:C0002 → uses → ATTACK:enterprise:S0029
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b532ff8b-5bb2-4f62-9d4c-373ec92cfca0
McAfee Night DragonATTACK:enterprise:C0002 → uses → ATTACK:enterprise:T1550.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c4cd588d-264a-468d-a472-8667b363d819
McAfee Night DragonATTACK:enterprise:C0002 → uses → ATTACK:enterprise:T1219
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d39f49f7-3e63-4625-b6e9-e3fdbd0ae013
McAfee Night DragonATTACK:enterprise:C0002 → uses → ATTACK:enterprise:T1110.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d6b2febc-64a1-48cd-88f1-67295650d9cb
McAfee Night DragonATTACK:enterprise:C0002 → uses → ATTACK:enterprise:T1584.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--dd49448e-10e3-4138-916b-1f3ba0727104
McAfee Night DragonATTACK:enterprise:C0002 → uses → ATTACK:enterprise:T1568
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ebe49c13-057f-4dc4-b04b-f19ac2480c4a
McAfee Night DragonATTACK:enterprise:C0002 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ee93f001-962f-41f5-8f17-98243608aad6
McAfee Night DragonATTACK:enterprise:C0002 → uses → ATTACK:enterprise:T1074.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--fa0e5b1c-2434-4aff-ab0c-25efb7ba1b49
McAfee Night Dragon