G0076 · 4 ATT&CK techniques · 0 correlated reports

Thrip

Aliases: None listed

Thrip is an espionage group that has targeted satellite communications, telecoms, and defense contractor companies in the U.S. and Southeast Asia. The group uses custom malware as well as "living off the land" techniques.

Open interactive actor investigation

ATT&CK techniques

T1059.001
PowerShellT1048.003
Exfiltration Over Unencrypted Non-C2 ProtocolT1219
Remote Access SoftwareT1588.002
Tool

Correlated CTI and IR reports

Continue the investigation

Interactive ThreatMapper ThreatMapper documentation CTI Analyst Field Manual Israel Threat Actors CTI Anomaly Detection Atlas ITDR Handbook 1200km Medium research