RANCOR
threat actorCN01
also known as
Other names and identifiers for this entity.
ATT&CK
Rancor
MISP
RANCOR · Rancor Taurus · Rancor group
The Rancor group’s attacks use two primary malware families which are naming DDKONG and PLAINTEE. DDKONG is used throughout the campaign and PLAINTEE appears to be new addition to these attackers’ toolkit. Countries Unit 42 has identified as targeted by Rancor with these malware families include, but are not limited to Singapore and Cambodia.
02
resolved ATT&CK groups
Threat groups associated with this.
03
techniques used (9)
ATT&CK techniques this enables or maps to.
04
software used (4)
Malware and tools associated with this.
05
references
External citations — patches, advisories, analysis.