ming_crime_family
The Ming crime family is a China-linked organized crime group involved in large-scale cyber scam operations run from scam compounds in Myanmar. According to the provided content, the group operated these compounds from at least 2015 to 2023 and generated at least $1.4 billion in proceeds. In November 2023, members of the Ming family were arrested in a joint Burmese and Chinese operation, and China later sentenced 11 members to death for their role in operating the scam compounds. The content does not provide specific technical TTPs (e.g., malware, intrusion methods, or victimology beyond “cyber scam compounds”), nor does it describe aliases or sub-groups.
Know when an actor pivots toward your sector
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Recent activity
3 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
The Ming crime family operated large-scale cyber scam compounds in Myanmar, targeting Chinese citizens. Their operations generated at least $1.4 billion between 2015 and 2023 before being dismantled in a joint Chinese-Burmese law enforcement operation.
The Ming crime family operated large-scale cyber scam compounds in Myanmar, targeting Chinese citizens and generating at least $1.4 billion between 2015 and 2023. Their operations were disrupted by a joint Burmese and Chinese law enforcement action.
The Ming crime family operated large-scale scam compounds in Myanmar, trafficking and forcing individuals to conduct online scams and unlicensed gambling targeting victims for financial and crypto-asset theft. Their operations generated at least $1.4 billion between 2015 and 2023.
The version that knows your environment.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.