TIDRONE

Description

(Trend Micro) Since the beginning of 2024, we have been receiving incident response cases from Taiwan. We track this unidentified threat cluster as TIDRONE. Our research reveals that the threat actors have shown significant interest in military-related industry chains, particularly in the manufacturers of drones. Furthermore, telemetry from VirusTotal indicates that the targeted countries are varied; thus, everyone should stay vigilant of this threat.

Names

Name	Name-Giver
TIDRONE	Trend Micro

Country

• Unknown

Motivation

• Information theft and espionage

First Seen

2024

Observed Sectors

• Defense
• Telecommunications

Observed Countries

• South Korea
• Taiwan

Tools

• CLNTEND
• CXCLNT

Operations

• 2024: Analysis on the Case of TIDRONE Threat Actor’s Attacks on Korean Companies https://asec.ahnlab.com/en/85119/

Information

• https://www.trendmicro.com/en_us/research/24/i/tidrone-targets-military-and-satellite-industries-in-taiwan.html

Other Information

Uuid

19ad5f2a-ef83-40b0-a692-fe19702ac6b4

Last Card Change

2024-12-27