Opening Forensia workspaceacquiring
Loading the current evidence view. Navigation and account controls remain available.
Loading recent evidenceacquiring
Threat actors
Loading the current evidence view. Navigation and account controls remain available.
Also known as: Pirate Panda, KeyBoy
40
techniques
6
software
11,683
corpus matches
profile
Tropic Trooper is an unaffiliated threat group that has led targeted campaigns against targets in Taiwan, the Philippines, and Hong Kong. Tropic Trooper focuses on targeting government, healthcare, transportation, and high-tech industries and has been active since 2011.
techniques
40 attributed · most-instrumented first
software
6 malware & tools attributed
PoisonIvy
S0012
BITSAdmin
S0190
KeyBoy
S0387
YAHOYAH
S0388
USBferry
S0452
ShadowPad
S0596
read this carefully
11,683 corpus matches is not attribution
That count is indicators which exhibit techniques Tropic Trooper is known to use. Many unrelated operators use the same techniques. Treat it as a shared-technique signal for hunting, never as first-party attribution to this group.
indicators exhibiting these techniques
Top by severity: each resolves to its own verdict.
stealth
+28 more techniques
showing 30 of 11,683
known aliases
Vendors name the same group differently. Searching any alias reaches this profile.