Cyber Resilience

Threat actor · all actors

Tropic TrooperG0081 state

🇨🇳 CN

aka Tropic Trooper, Pirate Panda, KeyBoy, APT23, BRONZE HOBART, G0081, Red Orthrus, Earth Centaur

Last updated: 2026-08-22

1attributed CVEs
56ATT&CK techniques
1.2IDF score (tooling uniqueness)
0exclusive CVEs
2026years active

About this actor

[Tropic Trooper](https://attack.mitre.org/groups/G0081) is an unaffiliated threat group that has led targeted campaigns against targets in Taiwan, the Philippines, and Hong Kong. [Tropic Trooper](https://attack.mitre.org/groups/G0081) focuses on targeting government, healthcare, transportation, and high-tech industries and has been active since 2011.(Citation: TrendMicro Tropic Trooper Mar 2018)(Citation: Unit 42 Tropic Trooper Nov 2016)(Citation: TrendMicro Tropic Trooper May 2020)

Source: MITRE ATT&CK

Names & naming systems

Each vendor coins its own name for the same actor. Where a name follows a known scheme we attribute it; the rest are listed honestly as unclassified.

MITRE ATT&CKG-number catalogue id

G0081

CrowdStrikenation-animal names

Pirate Panda

Mandiant / genericAPT numbering

APT23

Secureworkscolour-metal names

BRONZE HOBART

Unclassifiedno scheme matched

Tropic TrooperKeyBoyRed OrthrusEarth Centaur

How we know this

Data origin
MITRE ATT&CK Imported from the MITRE ATT&CK STIX bundle as an intrusion-set object.
Techniques
MITRE ATT&CK STIX mappings — 56 ATT&CK techniques on file.
Named victims
None on file.

See how actor data is built for the full pipeline.

Activity timeline

Profile

CVERiskCVSSEPSSPublishedProducts
CVE-2026-20929 5.97.50.01162026-01-13see CVE

Mitigating controls (NIST 800-53)

ControlTechniques coveredCoverage
SI-437 / 5666%
CM-634 / 5661%
CM-231 / 5655%
SI-331 / 5655%
CA-725 / 5645%
CM-723 / 5641%
AC-620 / 5636%
AC-319 / 5634%
SC-718 / 5632%
AC-216 / 5629%
SI-716 / 5629%
AC-415 / 5627%
RA-513 / 5623%
SI-212 / 5621%
AC-511 / 5620%

Co-occurring actors

Similar actors

Similar TTPs

Overlapping CVEs

Same nation-state