Início / Grupos de ameaça / Tropic Trooper
Tropic Trooper G0081
Também conhecido como: Pirate Panda, KeyBoy
Atualizado na fonte em 31/07/2026 · Ver no MITRE ATT&CK
3
CVEs associadas
49
Técnicas
6
Malwares e ferramentas
Tropic Trooper is an unaffiliated threat group that has led targeted campaigns against targets in Taiwan, the Philippines, and Hong Kong. Tropic Trooper focuses on targeting government, healthcare, transportation, and high-tech industries and has been active since 2011.
Vulnerabilidades exploradas
CVEs citadas pelo MITRE ATT&CK para este grupo, com o trecho da fonte. Fichas ainda não publicadas aqui aparecem sem link.
“Tropic Trooper has executed commands through Microsoft security vulnerabilities, including CVE-2017-11882, CVE-2018-0802, and CVE-2012-0158.”
“Tropic Trooper has executed commands through Microsoft security vulnerabilities, including CVE-2017-11882, CVE-2018-0802, and CVE-2012-0158.”
“Tropic Trooper has executed commands through Microsoft security vulnerabilities, including CVE-2017-11882, CVE-2018-0802, and CVE-2012-0158.”
Técnicas por tática
Acesso inicial
T1078.003 Local AccountsT1091 Replication Through Removable MediaT1566.001 Spearphishing Attachment Execução
T1059.003 Windows Command ShellT1106 Native APIT1203 Exploitation for Client ExecutionT1204.002 Malicious FileT1574.001 DLL Persistência
T1078.003 Local AccountsT1505.003 Web ShellT1543.003 Windows ServiceT1547.001 Registry Run Keys / Startup FolderT1547.004 Winlogon Helper DLL Escalada de privilégios
T1055.001 Dynamic-link Library InjectionT1078.003 Local AccountsT1543.003 Windows ServiceT1547.001 Registry Run Keys / Startup FolderT1547.004 Winlogon Helper DLL Furtividade
T1027.003 SteganographyT1027.013 Encrypted/Encoded FileT1036.005 Match Legitimate Resource Name or LocationT1055.001 Dynamic-link Library InjectionT1070.004 File DeletionT1078.003 Local AccountsT1140 Deobfuscate/Decode Files or InformationT1221 Template InjectionT1564.001 Hidden Files and DirectoriesT1574.001 DLL Descoberta
T1016 System Network Configuration DiscoveryT1033 System Owner/User DiscoveryT1046 Network Service DiscoveryT1049 System Network Connections DiscoveryT1057 Process DiscoveryT1082 System Information DiscoveryT1083 File and Directory DiscoveryT1135 Network Share DiscoveryT1518 Software DiscoveryT1518.001 Security Software DiscoveryT1680 Local Storage Discovery Movimento lateral
T1091 Replication Through Removable Media Coleta
T1119 Automated Collection Comando e controle
T1071.001 Web ProtocolsT1071.004 DNST1105 Ingress Tool TransferT1132.001 Standard EncodingT1573 Encrypted ChannelT1573.002 Asymmetric Cryptography Exfiltração
T1020 Automated ExfiltrationT1052.001 Exfiltration over USB © The MITRE Corporation. Conteúdo do ATT&CK® reproduzido e distribuído com permissão da MITRE Corporation. Descrições em inglês, como na fonte.