Thrip
Thrip is an espionage group that has targeted satellite communications, telecoms, and defense contractor companies in the U.S. and Southeast Asia. The group uses custom malware as well as "living off the land" techniques.
Properties
- Last source
- MITRE ATT&CK
- STIX ID
- intrusion-set--d69e568e-9ac8-4c08-b32c-d93b43ba9172
- In Signal since
- initial import (Sep 2026)
- Retrieved at
- 2026-11-02T12:53:29+00:00
- Type
- intrusion-set
MITRE ATT&CK Techniques (4)
Adversaries may steal data by exfiltrating it over an un-encrypted network protocol other than that of the existing command and control channel. The d
Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environ
An adversary may use legitimate desktop support software to establish an interactive command and control channel to target systems within networks. De
Adversaries may buy, steal, or download software tools that can be used during targeting. Tools can be open or closed source, free or commercial. A to
Software & Tools (3)
Catchamas is a Windows Trojan that steals information from compromised systems. (Citation: Symantec Catcham
Mimikatz is a credential dumper capable of obtaining plaintext Windows account logins and passwords, along
PsExec is a free Microsoft tool that can be used to execute a program on another computer. It is used by IT
Explore this actor's full graph with Ninja Signal