Thrip

G0076UnknownEspionage0 reports from 0 vendors

This threat actor targets organizations in the satellite communications, telecommunications, geospatial-imaging, and defense sectors in the United States and Southeast Asia for espionage purposes.

Vendor aliases (2)

The same group is tracked under different names by different vendors.

Vendor	Name
OSINT	G0076
OSINT	ATK78

Targeting

Sectors: Private sector

Victim countries: United States

MITRE ATT&CK techniques (4)

T1048.003 T1059.001 T1219.002 T1588.002

Indicators of compromise

No IOCs extracted yet from reports naming this actor.

Report timeline

Every report in the Global Intel Library that names Thrip, newest first. Open any report to see the full analysis with provenance.

No reports in the Lore library name this actor yet.

Threat feed IOCs (0)

Indicators from free threat feeds (abuse.ch ThreatFox, AlienVault OTX) attributed to Thrip. Each row shows why it was linked and where it came from.

No feed indicators linked to this actor yet. Feeds are checked every hour.

Public research & publications (6)

Open-source reports about this actor collected from MISP Galaxy and MITRE ATT&CK.

attack.mitre.orghttps://attack.mitre.org/groups/G0076
symantec.comhttps://www.symantec.com/blogs/threat-intelligence/thrip-hits-satellite-telecoms-defense-targets
cfr.orghttps://www.cfr.org/interactive/cyber-operations/thrip
attack.mitre.orghttps://attack.mitre.org/groups/G0076/
go.crowdstrike.comhttps://go.crowdstrike.com/rs/281-OBQ-266/images/Report2020CrowdStrikeGlobalThreatReport.pdf
cyberthreat.thalesgroup.comhttps://cyberthreat.thalesgroup.com/sites/default/files/2022-05/THALES%20THREAT%20HANDBOOK%202022%20Light%20Version_1.pdf