Rancor
Also reported as Rancor Group, Rancor Taurus, RANCOR and Rancor group. Linked to China by three sources.
Reports per quarter
Techniques in ATT&CK
Listed by ATT&CK
No report from the last two years names a technique ID.
CVEs named in reports
- CVE-2012-0158 KEV ransomware
- CVE-2014-1761 KEV
- CVE-2015-7645 KEV ransomware
- CVE-2016-1019 KEV ransomware
- CVE-2016-4117 KEV ransomware
- CVE-2017-0199 KEV ransomware
- CVE-2017-0261 KEV
- CVE-2017-11882 KEV ransomware
- CVE-2017-8570 KEV
- CVE-2017-8759 KEV
- CVE-2018-0798 KEV
- CVE-2018-0802 KEV ransomware
Show all 26 CVEs Show fewer
- CVE-2018-8570
- CVE-2019-11510 KEV ransomware
- CVE-2019-1367 KEV ransomware
- CVE-2019-19781 KEV ransomware
- CVE-2019-2215 KEV
- CVE-2020-0674 KEV
- CVE-2020-0688 KEV ransomware
- CVE-2020-10189 KEV
- CVE-2020-1472 KEV ransomware
- CVE-2020-1664
- CVE-2020-5135 KEV ransomware
- CVE-2020-5902 KEV ransomware
- CVE-2022-1040 KEV
- CVE-2022-30190 KEV ransomware
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
-
PortDoor- New Chinese APT Backdoor Attack Targets Russian Defense Sector
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor PortDoor- New Chinese APT Backdoor Attack Targets Russian Defense Sector
-
PortDoor: New Chinese APT Backdoor Attack Targets Russian Defense Sector
The link to Mirror on Box failed its last check. Mirror on Box Detailsfor PortDoor: New Chinese APT Backdoor Attack Targets Russian Defense Sector
Show all 37 reports Show fewer
-
An Overhead View of the Royal Road
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor An Overhead View of the Royal Road
-
Rancor- Cyber Espionage Group Uses New Custom Malware to Attack Southeast Asia
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Rancor- Cyber Espionage Group Uses New Custom Malware to Attack Southeast Asia
-
Rancor_ Cyber Espionage Group Uses New Custom Malware to Attack Southeast Asia
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Rancor_ Cyber Espionage Group Uses New Custom Malware to Attack Southeast Asia
-
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Rancor- The Year of The Phish
-
RANCOR APT_ Suspected targeted attacks against South East Asia
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor RANCOR APT_ Suspected targeted attacks against South East Asia
-
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Multiple Chinese Threat Groups Exploiting CVE-2018-0798 Equation Editor Vulnerability Since Late 2018
-
The original link failed its last check. Original publisher Detailsfor Accenture Strategy Templates
-
RANCOR- Targeted Attacks in South East Asia Using PLAINTEE and DDKONG Malware Families
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor RANCOR- Targeted Attacks in South East Asia Using PLAINTEE and DDKONG Malware Families
-
RANCOR: Targeted Attacks in South East Asia Using PLAINTEE and DDKONG Malware Families
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor RANCOR: Targeted Attacks in South East Asia Using PLAINTEE and DDKONG Malware Families
Newest first. Details opens the report in Explore.