PittyTiger
PittyTiger is a threat group believed to operate out of China that uses multiple different types of malware to maintain command and control.
Properties
- Last source
- MITRE ATT&CK
- STIX ID
- intrusion-set--fe98767f-9df8-42b9-83c9-004b1dec8647
- In Signal since
- initial import (Sep 2026)
- Retrieved at
- 2026-11-01T16:36:58+00:00
- Type
- intrusion-set
MITRE ATT&CK Techniques (2)
Adversaries may buy, steal, or download software tools that can be used during targeting. Tools can be open or closed source, free or commercial. A to
Adversaries may obtain and abuse credentials of existing accounts as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense
Software & Tools (5)
Lurid is a malware family that has been used by several groups, including [PittyTiger](https://attack.mitre
Mimikatz is a credential dumper capable of obtaining plaintext Windows account logins and passwords, along
PoisonIvy is a popular remote access tool (RAT) that has been used by many groups.(Citation: FireEye Poison
gh0st RAT is a remote access tool (RAT). The source code is public and it has been used by multiple groups.
gsecdump is a publicly-available credential dumper used to obtain password hashes and LSA secrets from Wind
Explore this actor's full graph with Ninja Signal