🇨🇳

TIDRONE

APT Group Information theft and espionage ETDA ✓

Also Known As 4 names

Earth Ammit TIDRONE VENOM TIDrone

Target Countries 5

Countries highlighted in red

Canada Ireland Republic of Korea Province of China Taiwan United States

Sectors Targeted

Telecommunications National Security and International Affairs 928 Software Publishers 51121 Space Research and Technology 927 Accommodation 721 Civic and Social Organizations 8134 Telecommunications 517 Employment Placement Agencies and Executive Search Services 56131 Defense

Details

Origin 🇨🇳 CN

Last Updated 18 Sep 2024

Related Zero-Days

No zero-day CVE linked to this actor

Known Names 1 entries

TIDRONE Trend Micro

Observed Target Countries 2

Based on ETDA data — countries highlighted in red

South Korea Taiwan

Description

(Trend Micro) Since the beginning of 2024, we have been receiving incident response cases from Taiwan. We track this unidentified threat cluster as TIDRONE. Our research reveals that the threat actors have shown significant interest in military-related industry chains, particularly in the manufacturers of drones. Furthermore, telemetry from VirusTotal indicates that the targeted countries are varied; thus, everyone should stay vigilant of this threat.

Tools Used 2

CLNTEND CXCLNT

Operations 1

2024 Analysis on the Case of TIDRONE Threat Actor’s Attacks on Korean Companies https://asec.ahnlab.com/en/85119/

Reports & References 1

https://www.trendmicro.com/en_us/research/24/i/tidrone-targets-military-and-satellite-industries-in-taiwan.html

ETDA Profile

TIDRONE

Origin

[Unknown]

First Seen 2024

Motivation

Information theft and espionage

View on ETDA APT Groups ↗