← All Threat Actors
Threat Actor Profile

Thrip

ATK78 G0076
▲ High Threat
This threat actor targets organizations in the satellite communications, telecommunications, geospatial-imaging, and defense sectors in the United States and Southeast Asia for espionage purposes.
Origin
Sponsor Unknown
Motivation Espionage

Target Sectors

Private sector

Known TTPs

PowerShell
Exfiltration Over Unencrypted Non-C2 Protocol
Remote Desktop Software
Tool

External Resources

CISA Advisories ↗

Related Intelligence

Hacking the mainframe…

LINK COPIED TO CLIPBOARD