APT / THREAT GROUP

Taidoor

aliases

Last seen:Mar 17, 2026

Intelligence Profile

[Taidoor](https://attack.mitre.org/groups/G0015) has been deprecated, as the only technique it was linked to was deprecated in ATT&CK v7.

Threat Analysis

Taidoor is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://www.trendmicro.de/cloud-content/us/pdfs/security-intelligence/white-papers/wp_the_taidoor_campaign.pdf

→https://attack.mitre.org/groups/G0015/

→https://www.trendmicro.com/en_us/research/22/j/tracking-earth-aughiskys-malware-and-changes.html

→https://blog.reversinglabs.com/blog/taidoor-a-truly-persistent-threat

Quick Facts

TypeAPT / Threat Group

Aliases3

SourceMalpedia

Also Known As

TaidoorG0015Earth Aughisky

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search Taidoor