{
  "id": "tropic-trooper",
  "name": "Tropic Trooper",
  "aliases": [
    "Pirate Panda",
    "KeyBoy"
  ],
  "domain": "cyber",
  "country": "UNK",
  "category": "Unattributed cyber threat group",
  "status": "tracked",
  "fielded": null,
  "operators": [],
  "summary": "Tropic Trooper is an unaffiliated threat group that has led targeted campaigns against targets in Taiwan, the Philippines, and Hong Kong. Tropic Trooper focuses on targeting government, healthcare, transportation, and high-tech industries and has been active since 2011.",
  "specs": [
    {
      "k": "sponsor",
      "v": "Unaffiliated",
      "src": [
        "mitre-g0081"
      ],
      "conf": "low"
    },
    {
      "k": "active_since",
      "v": 2011,
      "src": [
        "mitre-g0081"
      ],
      "conf": "medium",
      "note": "At least 2011"
    },
    {
      "k": "attack_id",
      "v": "G0081",
      "src": [
        "mitre-g0081"
      ],
      "conf": "high"
    },
    {
      "k": "targets",
      "v": "Tropic Trooper is an unaffiliated threat group that has led targeted campaigns against targets in Taiwan, the Philippines, and Hong Kong.",
      "src": [
        "mitre-g0081"
      ],
      "conf": "medium"
    },
    {
      "k": "techniques_count",
      "v": 40,
      "src": [
        "mitre-g0081"
      ],
      "conf": "high",
      "note": "ATT&CK v20.1"
    },
    {
      "k": "software",
      "v": "BITSAdmin, KeyBoy, PoisonIvy, ShadowPad, USBferry, YAHOYAH",
      "src": [
        "mitre-g0081"
      ],
      "conf": "high",
      "note": "6 malware and tool entries linked in ATT&CK"
    }
  ],
  "payloads": [],
  "variants": [],
  "art": "cyber",
  "image": null,
  "verified": null,
  "notes": "Tropic Trooper is an unaffiliated threat group that has led targeted campaigns against targets in Taiwan, the Philippines, and Hong Kong. Tropic Trooper focuses on targeting government, healthcare, transportation, and high-tech industries and has been active since 2011. Description adapted from MITRE ATT&CK®, © The MITRE Corporation, used under the ATT&CK Terms of Use.",
  "changelog": [
    {
      "date": "2026-11-08",
      "change": "Entry created from MITRE ATT&CK Enterprise v20.1 (group G0081)"
    }
  ],
  "url": "https://www.defensepedia.com/systems/tropic-trooper.html",
  "sources": {
    "mitre-g0081": {
      "title": "Tropic Trooper, Group G0081",
      "publisher": "MITRE ATT&CK",
      "url": "https://attack.mitre.org/groups/G0081/",
      "published": "2026-07-31",
      "tier": 2,
      "checked": "2026-11-08"
    }
  }
}