Transparent Tribe

Overview

Transparent Tribe is a suspected Pakistan-based threat group that has been active since at least 2013, primarily targeting diplomatic, defense, and research organizations in India and Afghanistan.

Targets

Activists · Civil society · Government · Military

Capabilities

• Exploitation of public-facing / client applications — ATT&CK T1203
• Custom malware/implant development — ATT&CK: 5 attributed custom malware families

TTPs — 14 techniques across 5 tactics

Tools & malware (5)

DarkComet · ObliqueRAT · njRAT · Crimson · Peppy

Reporting (3)

• Transparent Tribe APT expands its Windows malware arsenal — Malhotra, A. et al
• Transparent Tribe: Evolution analysis, part 1 — Dedola, G
• ProjectM: Link Found Between Pakistani Actor and Operation Transparent Tribe — Falcone, R. and Conant S