Transparent Tribe

Threat Actors · Transparent Tribe

· ATT&CK GroupG0134

COPPER FIELDSTONEAPT36Mythic LeopardProjectM

Techniques

Software

Tactics

Aliases

Description

Transparent Tribe is a suspected Pakistan-based threat group that has been active since at least 2013, primarily targeting diplomatic, defense, and research organizations in India and Afghanistan.(Citation: Proofpoint Operation Transparent Tribe March 2016)(Citation: Kaspersky Transparent Tribe August 2020)(Citation: Talos Transparent Tribe May 2021)

Tactic Coverage

execution (4)stealth (3)initial access (3)resource development (3)command and control (1)

Techniques Used (14)

T1027.013Encrypted/Encoded File

stealth

T1036.005Match Legitimate Resource Name or Location

stealth

T1059.005Visual Basic

execution

T1189Drive-by Compromise

initial access

T1203Exploitation for Client Execution

execution

Registration Required

Create a free account to access full Threat Actor Techniques

Showing 5 of 14 results

✓ Personal dashboard✓ Track 1 vendor/product✓ 1 keyword alert✓ Weekly digest✓ 1 CSV export/month

Already have an account? Sign in →

Software Used (5)

S0115Crimsonmalware S0334DarkCometmalware S0644ObliqueRATmalware S0643Peppymalware S0385njRATmalware

References (11)

https://attack.mitre.org/groups/G0134 https://adversary.crowdstrike.com/en-US/adversary/mythic-leopard/https://securelist.com/transparent-tribe-part-1/98127/https://unit42.paloaltonetworks.com/unit42-projectm-link-found-between-pakistani-actor-and-operation-transparent-tribe/https://www.proofpoint.com/sites/default/files/proofpoint-operation-transparent-tribe-threat-insight-en.pdf https://blog.talosintelligence.com/2021/05/transparent-tribe-infra-and-targeting.html https://www.secureworks.com/research/threat-profiles/copper-fieldstone