Opening Forensia workspaceacquiring
Loading the current evidence view. Navigation and account controls remain available.
Loading recent evidenceacquiring
Threat actors
Loading the current evidence view. Navigation and account controls remain available.
Also known as: COPPER FIELDSTONE, APT36, Mythic Leopard, ProjectM
14
techniques
5
software
9,544
corpus matches
profile
Transparent Tribe is a suspected Pakistan-based threat group that has been active since at least 2013, primarily targeting diplomatic, defense, and research organizations in India and Afghanistan.
techniques
14 attributed · most-instrumented first
software
5 malware & tools attributed
Crimson
S0115
DarkComet
S0334
njRAT
S0385
Peppy
S0643
ObliqueRAT
S0644
read this carefully
9,544 corpus matches is not attribution
That count is indicators which exhibit techniques Transparent Tribe is known to use. Many unrelated operators use the same techniques. Treat it as a shared-technique signal for hunting, never as first-party attribution to this group.
indicators exhibiting these techniques
Top by severity: each resolves to its own verdict.
+2 more techniques
showing 30 of 9,544
known aliases
Vendors name the same group differently. Searching any alias reaches this profile.