0attributed CVEs
8ATT&CK techniques
0.0IDF score (tooling uniqueness)
0exclusive CVEs
—years active
About this actor
[Thrip](https://attack.mitre.org/groups/G0076) is an espionage group that has targeted satellite communications, telecoms, and defense contractor companies in the U.S. and Southeast Asia. The group uses custom malware as well as "living off the land" techniques. (Citation: Symantec Thrip June 2018)
Source: MITRE ATT&CK
Names & naming systems
Each vendor coins its own name for the same actor. Where a name follows a known scheme we attribute it; the rest are listed honestly as unclassified.
MITRE ATT&CKG-number catalogue id
G0076
Unclassifiedno scheme matched
ThripATK78
How we know this
- Data origin
- MITRE ATT&CK Imported from the MITRE ATT&CK STIX bundle as an intrusion-set object.
- Techniques
- MITRE ATT&CK STIX mappings — 8 ATT&CK techniques on file.
- Named victims
- None on file.
See how actor data is built for the full pipeline.
Activity timeline
No activity events recorded.
Profile
| CVE | Risk | CVSS | EPSS | Published | Products |
|---|---|---|---|---|---|
| No attributed CVEs. | |||||
Mitigating controls (NIST 800-53)
| Control | Techniques covered | Coverage |
|---|---|---|
AC-3 | 5 / 8 | 62% |
CM-2 | 5 / 8 | 62% |
CM-6 | 5 / 8 | 62% |
SI-10 | 5 / 8 | 62% |
SI-3 | 5 / 8 | 62% |
SI-4 | 5 / 8 | 62% |
AC-2 | 4 / 8 | 50% |
AC-6 | 4 / 8 | 50% |
CA-7 | 4 / 8 | 50% |
CM-7 | 4 / 8 | 50% |
AC-17 | 3 / 8 | 38% |
AC-4 | 3 / 8 | 38% |
SC-7 | 3 / 8 | 38% |
SI-15 | 3 / 8 | 38% |
SI-7 | 3 / 8 | 38% |
Co-occurring actors
None.
Similar actors
Similar TTPs
- DarkVishnya 0.31
- DarkHydrus 0.25
- PittyTiger 0.22
- CopyKittens 0.22
- C0018 0.21
Same category
- Night Dragon 1.00
- FunnyDream 1.00
- C0011 1.00
- Operation Wocao 1.00
- Operation Dream Job 1.00