CVE Intelligence
Home / Threat actors / Transparent Tribe

Transparent Tribe G0134

🔔 Create alert

Also known as: COPPER FIELDSTONE, APT36, Mythic Leopard, ProjectM

Updated at source on Jul 31, 2026 · View on MITRE ATT&CK

2
associated CVEs
14
Techniques
5
Malware and tools

Transparent Tribe is a suspected Pakistan-based threat group that has been active since at least 2013, primarily targeting diplomatic, defense, and research organizations in India and Afghanistan.

Exploited vulnerabilities

CVEs cited by MITRE ATT&CK for this group, with the source excerpt. Records not yet published here appear without a link.

CVE-2012-0158 High · 8.8 KEV Ransomware Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability
“Transparent Tribe has crafted malicious files to exploit CVE-2012-0158 and CVE-2010-3333 for execution.”
CVE-2010-3333 High · 7.8 KEV Microsoft Office Stack-based Buffer Overflow Vulnerability
“Transparent Tribe has crafted malicious files to exploit CVE-2012-0158 and CVE-2010-3333 for execution.”

Techniques by tactic

Resource Development
T1583.001 DomainsT1584.001 DomainsT1608.004 Drive-by Target
Initial Access
T1189 Drive-by CompromiseT1566.001 Spearphishing AttachmentT1566.002 Spearphishing Link
Execution
T1059.005 Visual BasicT1203 Exploitation for Client ExecutionT1204.001 Malicious LinkT1204.002 Malicious File
Stealth
T1027.013 Encrypted/Encoded FileT1036.005 Match Legitimate Resource Name or LocationT1564.001 Hidden Files and Directories
Command and Control
T1568 Dynamic Resolution

Malware and tools

© The MITRE Corporation. ATT&CK® content reproduced and distributed with the permission of The MITRE Corporation.