Taiwan Drone Makers Targeted by New Cyber Espionage Group: TIDRONE’s High-Flying Hacks!
Trend Micro is tracking a previously undocumented threat actor, TIDRONE, targeting Taiwan drone manufacturers in an espionage-driven cyber attack campaign.
Hot Take:
Drone manufacturers in Taiwan must be feeling like they’re stuck in an episode of Cyber Espionage: The Reality Show, thanks to our new friends from the Far East. Yes, TIDRONE’s got them in their crosshairs, and it’s not because they’re planning a drone racing league.
Key Points:
- Unidentified Chinese-speaking threat actor named TIDRONE targets Taiwanese drone manufacturers.
- Espionage-driven campaign with a focus on military-related industries.
- Custom malware CXCLNT and CLNTEND, deployed via sideloaded rogue DLLs in Microsoft Word.
- Potential supply chain attack due to common ERP software among victims.
- Three-stage attack chain includes UAC bypass, credential dumping, and disabling antivirus products.
Already a member? Log in here