Cyber threats / Threat actors

RANCOR

CN Suspected sponsor: China · ATT&CK G0075
2
APAC targets
9
Techniques
0
Incidents
0
News · 30d
Profile
Also known as: G0075, Rancor Group, Rancor Taurus

The Rancor group’s attacks use two primary malware families which are naming DDKONG and PLAINTEE. DDKONG is used throughout the campaign and PLAINTEE appears to be new addition to these attackers’ toolkit. Countries Unit 42 has identified as targeted by Rancor with these malware families include, but are not limited to Singapore and Cambodia.

ATT&CK techniques · 9
Initial Access
Execution
Persistence
Stealth
Command and Control
Incidents attributed
  • No incident in the register is attributed to this actor.
In the news
  • No Asia-Pacific article names this actor yet.
Targets
Sectors: Civil society, Government
Relevance to the EU
EU relevance: Medium
Targets civil society in Cambodia, where the EU has Governance & Rule of Law projects
21 EU cooperation projects in the Asia-Pacific countries this actor targets:
Trade & Investment
4
Infrastructure & Transport
3
Education & Skills
3
Development Cooperation
3
Governance & Rule of Law
2
Digital & ICT
2
Climate & Environment
2
Peace & Security
1
Threats to the EU →
References
Sources: MISP, MITRE