Loading threat actor…
Crimson Rook is a fictional synthetic threat actor used in cyber threat intelligence exercises and training scenarios within the Synthetic Exercise World Format. It appears as TA-702 Crimson Rook and TA-712 Crimson Rook, indicating variant designations within the same fictional reference environment. The actor is associated with Orinthia, a fictional country whose represented sector is healthcare. No high-confidence operational reporting, victimology, malware usage, intrusion tradecraft, campaign history, or organizational structure is established beyond its inclusion as a fictional threat actor in this exercise dataset. Known aliases and designations include crimson_rook, Crimson Rook, TA-702 Crimson Rook, and TA-712 Crimson Rook.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
1 sources tracked across advisories and community write-ups. News coverage will land here when it surfaces.
No news coverage yet. Advisories and community discussion only.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.