Rancor

Overview

Rancor is a threat group that has led targeted campaigns against the South East Asia region. Rancor uses politically-motivated lures to entice victims to open malicious documents.

Targets

Civil society · Government

Regions

Cambodia · Singapore

TTPs — 9 techniques across 5 tactics

Tools & malware (4)

Reg · DDKONG · PLAINTEE · certutil

Reporting (1)

• RANCOR: Targeted Attacks in South East Asia Using PLAINTEE and DDKONG Malware Families — Ash, B., et al