TIDRONE Espionage Group Targets Taiwan Drone Makers in Cyber Campaign
A previously unidentified threat actor that most likely has connections to Chinese-speaking communities has targeted Taiwanese drone manufacturers in a cyberattack campaign that started in 2024.
With an emphasis on military-related supply chains, Trend Micro claims that the activities being tracked by the enemy under the codename TIDRONE is motivated by espionage.
It is currently unknown exactly which initial access vector was utilized to penetrate targets; Trend Micro's study revealed that custom malware like CXCLNT and CLNTEND were deployed using remote desktop technologies like UltraVNC.
An intriguing similarity noted in several victims is the use of the same enterprise resource planning (ERP) software, suggesting a potential supply chain intrusion read more about TIDRONE Espi...