Transparent Tribe
Threat actorAttributed to Pakistan by MITRE ATT&CK (source). An attribution, not a proven fact.
Names and who uses them
- Transparent TribeOur name
- APT36Cisco Talos
- Mythic LeopardCrowdStrike
- ProjectMPalo Alto Networks
- COPPER FIELDSTONESecureworks
Targets
Sectors: Defence, Diplomatic
Regions: India
Source: MITRE ATT&CKKnown techniques
- T1027.013Encrypted/Encoded File
- T1036.005Match Legitimate Resource Name or Location
- T1059.005Visual Basic
- T1189Drive-by Compromise
- T1203Exploitation for Client Execution
- T1204.001Malicious Link
- T1204.002Malicious File
- T1564.001Hidden Files and Directories
- T1566.001Spearphishing Attachment
- T1566.002Spearphishing Link
- T1568Dynamic Resolution
- T1583.001Domains
- T1584.001Domains
- T1608.004Drive-by Target
Malware and tools used
Source: MITRE ATT&CKRecent news
No stories yet.