Home / Threat actors / Thrip
Thrip G0076
Updated at source on Jul 31, 2026 · View on MITRE ATT&CK
0
associated CVEs
4
Techniques
3
Malware and tools
Thrip is an espionage group that has targeted satellite communications, telecoms, and defense contractor companies in the U.S. and Southeast Asia. The group uses custom malware as well as "living off the land" techniques.
Exploited vulnerabilities
CVEs cited by MITRE ATT&CK for this group, with the source excerpt. Records not yet published here appear without a link.
ATT&CK does not cite CVEs for this group.
Techniques by tactic
Resource Development
T1588.002 Tool Execution
T1059.001 PowerShell Command and Control
T1219.002 Remote Desktop Software Exfiltration
T1048.003 Exfiltration Over Unencrypted Non-C2 Protocol © The MITRE Corporation. ATT&CK® content reproduced and distributed with the permission of The MITRE Corporation.