CNChinaconfidence: 50G0075
RANCORRANCOR
Also known as: Rancor group · Rancor · Rancor Group · G0075 · Rancor Taurus
Origin
CN
Known aliases
5
Target sectors
2
Attribution
State-sponsored
Profile
The Rancor group’s attacks use two primary malware families which are naming DDKONG and PLAINTEE. DDKONG is used throughout the campaign and PLAINTEE appears to be new addition to these attackers’ toolkit. Countries Unit 42 has identified as targeted by Rancor with these malware families include, but are not limited to Singapore and Cambodia.
Aliases· 5
Rancor groupRancorRancor GroupRancor Taurus
Target sectors· 2
GovernmentCivil society
Known victims· 2
- Singapore
- Cambodia
MITRE ATT&CK Group crosswalk
References
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.