FlagThis

← All Threat Actors
Threat Actor Profile

BITTER

APT-Q-37 G1002 Hazy Tiger T-APT-17 TA4865
▲ High Threat
[BITTER](https://attack.mitre.org/groups/G1002) is a suspected South Asian cyber espionage threat group that has been active since at least 2013. [BITTER](https://attack.mitre.org/groups/G1002) has targeted government, energy, and engineering organizations in Pakistan, China, Bangladesh, and Saudi Arabia.(Citation: Cisco Talos Bitter Bangladesh May 2022)(Citation: Forcepoint BITTER Pakistan Oct 2016)
Origin —

Known TTPs

Ingress Tool Transfer
Web Protocols
Tool
Dynamic Resolution
Spearphishing Attachment
Malicious File
Encrypted/Encoded File
Encrypted Channel
Exploitation for Privilege Escalation
Masquerade Task or Service
Upload Malware
Dynamic Data Exchange
Exploitation for Client Execution
Domains
Scheduled Task
Non-Application Layer Protocol

External Resources

CISA Advisories ↗

Related Intelligence

Hacking the mainframe…
LINK COPIED TO CLIPBOARD