Rancor
Rancor is a China-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets 3 sectors, including Government, and Defense and Aerospace, in 5 countries, including Russia and Thailand. It uses 19 MITRE ATT&CK techniques and exploits 3 known CVEs.
Also known as
- Rancor Group
- Rancor Taurus
- G0075
- Origin
- China
- Techniques
- 19
- Exploited CVEs
- 3
- First seen
- Jun 26, 2018
- Last seen
- Jun 1, 2019
- Record updated
Who They Target.
About Rancor.
Rancor is a threat group that has led targeted campaigns against the South East Asia region. Rancor uses politically-motivated lures to entice victims to open malicious documents.
Last updated Sep 30, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.