Trusted Design

Tropic Trooper

アクターID: G0081

· MITRE Pageへのリンク

脅威アクターの詳細

Tropic Trooper is an unaffiliated threat group that has led targeted campaigns against targets in Taiwan, the Philippines, and Hong Kong. Tropic Trooper focuses on targeting government, healthcare, transportation, and high-tech industries and has been active since 2011.(Citation: TrendMicro Tropic Trooper Mar 2018)(Citation: Unit 42 Tropic Trooper Nov 2016)(Citation: TrendMicro Tropic Trooper May 2020)

脅威アクターの別名・別称

Tropic Trooper
Pirate Panda
KeyBoy

利用した攻撃手法

• T1557 - Adversary-in-the-Middle
• T1161 - LC_LOAD_DYLIB Addition
• T1491.002 - External Defacement
• T1195.001 - Compromise Software Dependencies and Development Tools
• T1218.013 - Mavinject
• T1087.002 - Domain Account
• T1176.001 - Browser Extensions
• T1598.003 - Spearphishing Link
• T1089 - Disabling Security Tools
• T1487 - Disk Structure Wipe
• T1007 - System Service Discovery
• T1120 - Peripheral Device Discovery
• T1590.003 - Network Trust Dependencies
• T1058 - Service Registry Permissions Weakness
• T1059.010 - AutoHotKey & AutoIT
• T1555.003 - Credentials from Web Browsers
• T1003.001 - LSASS Memory
• T1590.006 - Network Security Appliances
• T1090 - Proxy
• T1219.001 - IDE Tunneling
• T1055.004 - Asynchronous Procedure Call
• T1583.006 - Web Services
• T1679 - Selective Exclusion
• T1136.003 - Cloud Account
• T1683 - Generate Content
• T1218.010 - Regsvr32
• T1128 - Netsh Helper DLL
• T1562.011 - Spoof Security Alerting
• T1506 - Web Session Cookie
• T1591.004 - Identify Roles
• T1070.009 - Clear Persistence
• T1200 - Hardware Additions
• T1556.005 - Reversible Encryption
• T1209 - Time Providers
• T1159 - Launch Agent
• T1547.013 - XDG Autostart Entries
• T1105 - Ingress Tool Transfer
• T1665 - Hide Infrastructure
• T1587 - Develop Capabilities
• T1490 - Inhibit System Recovery

関連するCVE (攻撃手法に関連)

• CVE-2013-6282 (T1219.001)
• CVE-2016-1898 (T1491.002)
• CVE-2016-1897 (T1491.002)
• CVE-2015-0932 (T1491.002)
• CVE-2014-7247 (T1218.010)
• CVE-2013-5990 (T1218.010)
• CVE-2014-4114 (T1200)
• CVE-2015-1770 (T1200)
• CVE-2015-2545 (T1200)
• CVE-2017-0199 (T1218.010)
• CVE-2012-0158 (T1200)
• CVE-2013-3906 (T1218.010)
• CVE-2014-6352 (T1562.011)
• CVE-2015-0016 (T1218.010)
• CVE-2010-3333 (T1209)
• CVE-2010-0188 (T1591.004)
• CVE-2010-2884 (T1591.004)
• CVE-2013-0640 (T1591.004)
• CVE-2011-0611 (T1591.004)
• CVE-2015-2546 (T1219.001)
• CVE-2014-4113 (T1219.001)
• CVE-2015-1701 (T1219.001)
• CVE-2017-0263 (T1219.001)
• CVE-2015-0057 (T1219.001)
• CVE-2015-2360 (T1219.001)
• CVE-2014-4148 (T1219.001)
• CVE-2010-1553 (T1209)
• CVE-2014-1761 (T1218.010)
• CVE-2015-2853 (T1218.010)
• CVE-2017-16929 (T1219.001)
• CVE-2012-1876 (T1218.010)
• CVE-2012-2539 (T1218.010)
• CVE-2013-3660 (T1587)
• CVE-2013-7331 (T1200)
• CVE-2009-3129 (T1209)
• CVE-2014-6332 (T1587)
• CVE-2012-4792 (T1547.013)
• CVE-2014-1776 (T1587)
• CVE-2010-0806 (T1587)
• CVE-2015-0310 (T1218.010)
• CVE-2015-5897 (T1219.001)
• CVE-2015-4495 (T1218.010)
• CVE-2014-8361 (T1556.005)
• CVE-2010-0232 (T1218.010)
• CVE-2010-4398 (T1587)
• CVE-2012-6422 (T1055.004)
• CVE-2025-24893 (T1218.010)
• CVE-2015-1427 (T1555.003)
• CVE-2015-3456 (T1590.006)
• CVE-2014-6271 (T1665)
• CVE-2016-2342 (T1209)
• CVE-2014-4322 (T1219.001)
• CVE-2013-2595 (T1200)
• CVE-2012-0611 (T1218.010)
• CVE-2016-0189 (T1218.010)
• CVE-2023-1389 (T1219.001)
• CVE-2015-5122 (T1159)
• CVE-2015-3043 (T1218.010)
• CVE-2015-3090 (T1218.010)
• CVE-2016-0984 (T1219.001)
• CVE-2015-0313 (T1218.010)
• CVE-2014-0329 (T1219.001)
• CVE-2015-5134 (T1219.001)
• CVE-2015-5539 (T1219.001)
• CVE-2015-5557 (T1219.001)
• CVE-2015-5563 (T1219.001)
• CVE-2015-5559 (T1219.001)
• CVE-2015-5540 (T1219.001)
• CVE-2015-5561 (T1219.001)
• CVE-2015-5551 (T1219.001)
• CVE-2015-5564 (T1219.001)
• CVE-2015-5565 (T1219.001)
• CVE-2015-5550 (T1219.001)
• CVE-2015-5566 (T1219.001)
• CVE-2015-5127 (T1219.001)
• CVE-2015-5556 (T1219.001)
• CVE-2015-3628 (T1218.010)
• CVE-2016-1287 (T1055.004)
• CVE-2015-8287 (T1218.010)
• CVE-2012-0507 (T1219.001)
• CVE-2014-8439 (T1209)
• CVE-2013-2551 (T1218.010)
• CVE-2014-0569 (T1219.001)
• CVE-2025-34026 (T1159)
• CVE-2026-20127 (T1219.001)
• CVE-2015-5119 (T1218.010)
• CVE-2012-1856 (T1200)
• CVE-2015-3785 (T1219.001)
• CVE-2015-3113 (T1218.010)
• CVE-2015-2590 (T1219.001)
• CVE-2015-2424 (T1219.001)
• CVE-2015-0097 (T1219.001)
• CVE-2015-2502 (T1218.010)
• CVE-2016-1990 (T1219.001)
• CVE-2016-1991 (T1219.001)
• CVE-2016-1010 (T1218.010)
• CVE-2016-1019 (T1219.001)
• CVE-2016-1001 (T1218.010)
• CVE-2016-0998 (T1218.010)
• CVE-2015-1641 (T1219.001)
• CVE-2015-0359 (T1218.010)
• CVE-2015-5130 (T1219.001)
• CVE-2015-2852 (T1218.010)
• CVE-2015-2854 (T1218.010)
• CVE-2012-4969 (T1587)
• CVE-2015-6022 (T1219.001)
• CVE-2017-0261 (T1055.004)
• CVE-2017-0262 (T1055.004)
• CVE-2025-55182 (T1055.004)
• CVE-2015-0311 (T1218.010)
• CVE-2010-3081 (T1209)
• CVE-2012-3213 (T1218.010)
• CVE-2014-0322 (T1218.010)
• CVE-2012-1258 (T1209)
• CVE-2015-0336 (T1218.010)
• CVE-2011-3544 (T1219.001)
• CVE-2014-3153 (T1218.010)
• CVE-2015-3636 (T1055.004)
• CVE-2015-3105 (T1218.010)
• CVE-2014-0497 (T1218.010)
• CVE-2017-17215 (T1219.001)
• CVE-2013-0074 (T1218.010)
• CVE-2013-2465 (T1219.001)
• CVE-2014-0515 (T1218.010)
• CVE-2014-0556 (T1219.001)
• CVE-2015-5560 (T1219.001)
• CVE-2015-0071 (T1218.010)
• CVE-2014-9163 (T1209)
• CVE-2012-1723 (T1219.001)
• CVE-2015-1761 (T1219.001)
• CVE-2014-8440 (T1219.001)
• CVE-2011-3402 (T1219.001)
• CVE-2014-6324 (T1219.001)
• CVE-2013-2678 (T1219.001)
• CVE-2015-2426 (T1587)
• CVE-2008-1436 (T1490)
• CVE-2014-3393 (T1055.004)
• CVE-2014-2273 (T1219.001)
• CVE-2015-4902 (T1219.001)
• CVE-2014-3897 (T1219.001)
• CVE-2015-2387 (T1219.001)
• CVE-2010-2572 (T1219.001)
• CVE-2011-1255 (T1218.010)
• CVE-2017-8570 (T1219.001)
• CVE-2015-2419 (T1218.010)
• CVE-2016-4117 (T1218.010)
• CVE-2017-0001 (T1219.001)
• CVE-2017-0143 (T1218.010)
• CVE-2025-31125 (T1219.001)
• CVE-2025-55183 (T1219.001)
• CVE-2025-55184 (T1055.004)
• CVE-2025-66478 (T1219.001)
• CVE-2025-68645 (T1209)
• CVE-2026-0723 (T1219.001)
• CVE-2015-6034 (T1055.004)
• CVE-2012-0056 (T1055.004)
• CVE-2025-13928 (T1055.004)
• CVE-2017-12149 (T1136.003)
• CVE-2013-2094 (T1136.003)
• CVE-2016-6532 (T1136.003)
• CVE-2015-7645 (T1218.010)
• CVE-2015-7808 (T1218.010)
• CVE-2015-7755 (T1218.010)
• CVE-2016-9495 (T1218.010)
• CVE-2010-1297 (T1591.004)
• CVE-2010-2883 (T1209)
• CVE-2013-0641 (T1591.004)
• CVE-2025-61882 (T1200)
• CVE-2012-4681 (T1159)

Actor – Pulse グラフ

---

← 脅威アクター一覧に戻る