Transparent Tribe (G0134) | Threat Actor Index

Techniques

Toolsets

CVEs Referenced

KEV Entries

About Transparent Tribe

Transparent Tribe is a suspected Pakistan-based threat group that has been active since at least 2013, primarily targeting diplomatic, defense, and research organizations in India and Afghanistan.

View MITRE record ↗

Techniques by Tactic (14)

Resource Development

T1583.001 DomainsT1584.001 DomainsT1608.004 Drive-by Target

Initial Access

T1189 Drive-by CompromiseT1566.001 Spearphishing AttachmentT1566.002 Spearphishing Link

Execution

T1059.005 Visual BasicT1203 Exploitation for Client ExecutionT1204.001 Malicious LinkT1204.002 Malicious File

Stealth

T1027.013 Encrypted/Encoded FileT1036.005 Match Legitimate Resource Name or LocationT1564.001 Hidden Files and Directories

Command & Control

T1568 Dynamic Resolution

Toolsets (5)

🐛

Crimson S0115

Malware · Windows

🐛

DarkComet S0334

Malware · Windows

🐛

ObliqueRAT S0644

Malware · Windows

🐛

Peppy S0643

Malware · Windows

🐛

njRAT S0385

Malware · Windows

References & Reports (6)

Crowdstrike. (n.d.). Mythic Leopard. Retrieved October 6, 2021.
Dedola, G. (2020, August 20). Transparent Tribe: Evolution analysis, part 1. Retrieved September 2, 2021.
Falcone, R. and Conant S. (2016, March 25). ProjectM: Link Found Between Pakistani Actor and Operation Transparent Tribe. Retrieved September 2, 2021.
Huss, D. (2016, March 1). Operation Transparent Tribe. Retrieved June 8, 2016.
Malhotra, A. et al. (2021, May 13). Transparent Tribe APT expands its Windows malware arsenal. Retrieved September 2, 2021.
Secureworks. (n.d.). COPPER FIELDSTONE. Retrieved October 6, 2021.

↑