Skip to content
brandefense.io
Request A Demo
UnclassifiedUnknown

TiltedTemple

TiltedTemple is a China-attributed threat actor group, tracked by Brandefense.

Also known as
  • DEV-0322
  • Circle Typhoon
Request IOC feedRequest ATT&CK export
Origin
China
Techniques
0
Exploited CVEs
No CVE data
Record updated

About TiltedTemple.

One of their notable tools is a custom backdoor called SockDetour, which operates filelessly and socketlessly on compromised Windows servers. The group's activities have been linked to the exploitation of vulnerabilities in Zoho ManageEngine ADSelfService Plus and ServiceDesk Plus.

Last updated Oct 9, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.