Tropic Trooper (G0081) | Threat Actor Index

About Tropic Trooper

Tropic Trooper is an unaffiliated threat group that has led targeted campaigns against targets in Taiwan, the Philippines, and Hong Kong. Tropic Trooper focuses on targeting government, healthcare, transportation, and high-tech industries and has been active since 2011.

View MITRE record ↗

Techniques by Tactic (40)

Initial Access

T1078.003 Local AccountsT1091 Replication Through Removable MediaT1566.001 Spearphishing Attachment

Execution

T1059.003 Windows Command ShellT1106 Native APIT1203 Exploitation for Client ExecutionT1204.002 Malicious FileT1574.001 DLL

Persistence

T1078.003 Local AccountsT1505.003 Web ShellT1543.003 Windows ServiceT1547.001 Registry Run Keys / Startup FolderT1547.004 Winlogon Helper DLL

Privilege Escalation

T1055.001 Dynamic-link Library InjectionT1078.003 Local AccountsT1543.003 Windows ServiceT1547.001 Registry Run Keys / Startup FolderT1547.004 Winlogon Helper DLL

Stealth

T1027.003 SteganographyT1027.013 Encrypted/Encoded FileT1036.005 Match Legitimate Resource Name or LocationT1055.001 Dynamic-link Library InjectionT1070.004 File DeletionT1078.003 Local AccountsT1140 Deobfuscate/Decode Files or InformationT1221 Template InjectionT1564.001 Hidden Files and DirectoriesT1574.001 DLL