MITRE ATT&CKgroup

G0076 Thrip

Published 2018-10-17 Modified 2026-07-31 Official page ↗
Domain
enterprise
Version
1.2
Created
2018-10-17

Description

Thrip is an espionage group that has targeted satellite communications, telecoms, and defense contractor companies in the U.S. and Southeast Asia. The group uses custom malware as well as "living off the land" techniques.

Related

Uses · MITRE ATT&CK (7)

  • T1219.002 Remote Desktop Software sub-technique
  • T1588.002 Tool sub-technique
  • T1048.003 Exfiltration Over Unencrypted Non-C2 Protocol sub-technique
  • T1059.001 PowerShell sub-technique
  • S0261 Catchamas software (malware)
  • S0002 Mimikatz software (tool)
  • S0029 PsExec software (tool)

References