Tropic Trooper

Threat Actors · Tropic Trooper

· ATT&CK GroupG0081

Pirate PandaKeyBoy

Techniques

Software

Tactics

Aliases

Description

Tropic Trooper is an unaffiliated threat group that has led targeted campaigns against targets in Taiwan, the Philippines, and Hong Kong. Tropic Trooper focuses on targeting government, healthcare, transportation, and high-tech industries and has been active since 2011.(Citation: TrendMicro Tropic Trooper Mar 2018)(Citation: Unit 42 Tropic Trooper Nov 2016)(Citation: TrendMicro Tropic Trooper May 2020)

Tactic Coverage

discovery (11)stealth (10)command and control (6)privilege escalation (5)execution (5)persistence (5)initial access (3)exfiltration (2)lateral movement (1)collection (1)

Techniques Used (40)

T1016System Network Configuration Discovery

discovery

T1020Automated Exfiltration

exfiltration

T1027.003Steganography

stealth

T1027.013Encrypted/Encoded File

stealth

T1033System Owner/User Discovery

discovery

Registration Required

Create a free account to access full Threat Actor Techniques

Showing 5 of 40 results

✓ Personal dashboard✓ Track 1 vendor/product✓ 1 keyword alert✓ Weekly digest✓ 1 CSV export/month

Already have an account? Sign in →

Software Used (6)

S0190BITSAdmintool S0387KeyBoymalware S0012PoisonIvymalware S0596ShadowPadmalware S0452USBferrymalware S0388YAHOYAHmalware

References (8)

https://attack.mitre.org/groups/G0081 https://www.crowdstrike.com/blog/on-demand-webcast-crowdstrike-experts-on-covid-19-cybersecurity-challenges-and-recommendations/https://documents.trendmicro.com/assets/Tech-Brief-Tropic-Trooper-s-Back-USBferry-Attack-Targets-Air-gapped-Environments.pdf https://blog.trendmicro.com/trendlabs-security-intelligence/tropic-trooper-new-strategy/https://researchcenter.paloaltonetworks.com/2016/11/unit42-tropic-trooper-targets-taiwanese-government-and-fossil-fuel-provider-with-poison-ivy/