{
	"id": "411c8002-8b8f-4c03-a362-c3fbcf4be307",
	"created_at": "2026-04-06T03:36:31.770003Z",
	"updated_at": "2026-04-10T03:30:45.976474Z",
	"deleted_at": null,
	"sha1_hash": "affd97fd158e0faa22c3d848197086c4b60d3a47",
	"title": "Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 44004,
	"plain_text": "Threat Group Cards: A Threat Actor Encyclopedia\nArchived: 2026-04-06 03:20:45 UTC\n APT group: TIDRONE\nNames TIDRONE (Trend Micro)\nCountry [Unknown]\nMotivation Information theft and espionage\nFirst seen 2024\nDescription\n(Trend Micro) Since the beginning of 2024, we have been receiving incident\nresponse cases from Taiwan. We track this unidentified threat cluster as TIDRONE.\nOur research reveals that the threat actors have shown significant interest in military-related industry chains, particularly in the manufacturers of drones. Furthermore,\ntelemetry from VirusTotal indicates that the targeted countries are varied; thus,\neveryone should stay vigilant of this threat.\nObserved\nSectors: Defense, Telecommunications.\nCountries: South Korea, Taiwan.\nTools used CLNTEND, CXCLNT.\nOperations performed 2024\nAnalysis on the Case of TIDRONE Threat Actor’s Attacks on Korean\nCompanies\nInformation\nLast change to this card: 27 December 2024\nDownload this actor card in PDF or JSON format\nSource: https://apt.etda.or.th/cgi-bin/showcard.cgi?u=19ad5f2a-ef83-40b0-a692-fe19702ac6b4\nhttps://apt.etda.or.th/cgi-bin/showcard.cgi?u=19ad5f2a-ef83-40b0-a692-fe19702ac6b4\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/showcard.cgi?u=19ad5f2a-ef83-40b0-a692-fe19702ac6b4"
	],
	"report_names": [
		"showcard.cgi?u=19ad5f2a-ef83-40b0-a692-fe19702ac6b4"
	],
	"threat_actors": [
		{
			"id": "7f0f8bbd-b91a-4e0d-9717-7ba87a101eb6",
			"created_at": "2024-09-20T02:00:04.568566Z",
			"updated_at": "2026-04-10T02:00:03.691713Z",
			"deleted_at": null,
			"main_name": "TIDRONE",
			"aliases": [
				"Earth Ammit"
			],
			"source_name": "MISPGALAXY:TIDRONE",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "21268fa8-7e4a-4cee-bb4f-cd26f9ae3de6",
			"created_at": "2024-10-25T02:02:07.979938Z",
			"updated_at": "2026-04-10T02:00:04.937108Z",
			"deleted_at": null,
			"main_name": "TIDRONE",
			"aliases": [],
			"source_name": "ETDA:TIDRONE",
			"tools": [
				"CLNTEND",
				"CXCLNT"
			],
			"source_id": "ETDA",
			"reports": null
		}
	],
	"ts_created_at": 1775446591,
	"ts_updated_at": 1775791845,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/affd97fd158e0faa22c3d848197086c4b60d3a47.pdf",
		"text": "https://archive.orkl.eu/affd97fd158e0faa22c3d848197086c4b60d3a47.txt",
		"img": "https://archive.orkl.eu/affd97fd158e0faa22c3d848197086c4b60d3a47.jpg"
	}
}