D
CyberUnattributed

Tropic Trooper

Unattributed cyber threat groupTrackedPending verification

Also known as: Pirate Panda, KeyBoy

CyberUNK
Identification silhouette. Not drawn to scale between entries.
Fact cardConfidence · Source
System
TypeUnattributed cyber threat group
Alternative designationsPirate Panda, KeyBoy
ProliferationOrigin country only
Active since2011At least 2011Med[1]
MITRE ATT&CK IDG0081High[1]
Capabilities
ATT&CK techniques used40ATT&CK v20.1High[1]
Malware and toolsBITSAdmin, KeyBoy, PoisonIvy, ShadowPad, USBferry, YAHOYAH6 malware and tool entries linked in ATT&CKHigh[1]
Attribution and activity
Attributed sponsorUnaffiliatedLow[1]
TargetsTropic Trooper is an unaffiliated threat group that has led targeted campaigns against targets in Taiwan, the Philippines, and Hong Kong.Med[1]
Notes
Tropic Trooper is an unaffiliated threat group that has led targeted campaigns against targets in Taiwan, the Philippines, and Hong Kong. Tropic Trooper focuses on targeting government, healthcare, transportation, and high-tech industries and has been active since 2011. Description adapted from MITRE ATT&CK®, © The MITRE Corporation, used under the ATT&CK Terms of Use.
Summary

Tropic Trooper is an unaffiliated threat group that has led targeted campaigns against targets in Taiwan, the Philippines, and Hong Kong. Tropic Trooper focuses on targeting government, healthcare, transportation, and high-tech industries and has been active since 2011.

Draft entry. Values come from the cited public sources and are awaiting editor verification.
CompareJSON
Operators
Sources
  1. Tropic Trooper, Group G0081, MITRE ATT&CK
    Published/updated 2026-07-31 · Tier 2 · checked 2026-11-08
Change log
  • 2026-11-08 Entry created from MITRE ATT&CK Enterprise v20.1 (group G0081)