MITRE ATT&CKgroup

G0081 Tropic Trooper

Published 2019-01-29 Modified 2026-07-31 Official page ↗
Domain
enterprise
Aliases
Pirate Panda, KeyBoy
Version
1.6
Created
2019-01-29

Description

Tropic Trooper is an unaffiliated threat group that has led targeted campaigns against targets in Taiwan, the Philippines, and Hong Kong. Tropic Trooper focuses on targeting government, healthcare, transportation, and high-tech industries and has been active since 2011.

Related

Uses · MITRE ATT&CK (46)

  • T1680 Local Storage Discovery technique
  • T1027.013 Encrypted/Encoded File sub-technique
  • S0596 ShadowPad software (malware)
  • S0452 USBferry software (malware)
  • T1573 Encrypted Channel technique
  • T1573.002 Asymmetric Cryptography sub-technique
  • T1071.001 Web Protocols sub-technique
  • T1071.004 DNS sub-technique
  • T1132.001 Standard Encoding sub-technique
  • T1078.003 Local Accounts sub-technique
  • T1574.001 DLL sub-technique
  • T1052.001 Exfiltration over USB sub-technique
  • T1204.002 Malicious File sub-technique
  • T1059.003 Windows Command Shell sub-technique
  • T1566.001 Spearphishing Attachment sub-technique
  • T1564.001 Hidden Files and Directories sub-technique
  • T1518.001 Security Software Discovery sub-technique
  • T1036.005 Match Legitimate Resource Name or Location sub-technique
  • T1027.003 Steganography sub-technique
  • T1070.004 File Deletion sub-technique
  • T1547.004 Winlogon Helper DLL sub-technique
  • T1547.001 Registry Run Keys / Startup Folder sub-technique
  • T1543.003 Windows Service sub-technique
  • T1055.001 Dynamic-link Library Injection sub-technique
  • T1505.003 Web Shell sub-technique
  • T1518 Software Discovery technique
  • S0388 YAHOYAH software (malware)
  • S0387 KeyBoy software (malware)
  • T1221 Template Injection technique
  • S0190 BITSAdmin software (tool)
Show all 46 ›

References