Threat actor · all actors
RancorG0075 state
🇨🇳 CN
aka Rancor, Rancor group, G0075, Rancor Taurus
Last updated: 2026-07-03
0attributed CVEs
16ATT&CK techniques
0.0IDF score (tooling uniqueness)
0exclusive CVEs
—years active
About this actor
[Rancor](https://attack.mitre.org/groups/G0075) is a threat group that has led targeted campaigns against the South East Asia region. [Rancor](https://attack.mitre.org/groups/G0075) uses politically-motivated lures to entice victims to open malicious documents. (Citation: Rancor Unit42 June 2018)
Source: MITRE ATT&CK
Activity timeline
No activity events recorded.
Profile
| CVE | Risk | CVSS | EPSS | Published | Products |
|---|---|---|---|---|---|
| No attributed CVEs. | |||||
Mitigating controls (NIST 800-53)
| Control | Techniques covered | Coverage |
|---|---|---|
CM-2 | 16 / 16 | 100% |
CM-6 | 16 / 16 | 100% |
SI-4 | 14 / 16 | 88% |
SI-3 | 12 / 16 | 75% |
CA-7 | 11 / 16 | 69% |
CM-7 | 11 / 16 | 69% |
AC-2 | 9 / 16 | 56% |
AC-3 | 9 / 16 | 56% |
AC-6 | 9 / 16 | 56% |
AC-4 | 8 / 16 | 50% |
SC-7 | 8 / 16 | 50% |
SI-7 | 7 / 16 | 44% |
AC-5 | 6 / 16 | 38% |
CM-5 | 6 / 16 | 38% |
IA-2 | 6 / 16 | 38% |
Co-occurring actors
None.
Similar actors
Similar TTPs
- Machete 0.50
- Confucius 0.38
- Molerats 0.37
- Water Curupira Pikabot Distribution 0.36
- Nomadic Octopus 0.35
Same nation-state
- Night Dragon 1.00
- FunnyDream 1.00
- Operation Wocao 1.00
- C0017 1.00
- Cutting Edge 1.00
Same category
- Night Dragon 1.00
- FunnyDream 1.00
- C0011 1.00
- Operation Wocao 1.00
- Operation Dream Job 1.00