Rancor is a threat group that has led targeted campaigns against Southeast Asia. Rancor has used politically motivated lures to trick victims into opening malicious documents.

Other names for this threat

Rancor Group

This is a collection of rules based on the presence of indicators of compromise publicly reported as associated with this malicious actor.