APT
ATLAS
Atlas
Actors
145
Names
507
Sectors
40
⌘K
▸
sign in
Atlas
Actors
145
Names
507
Sectors
40
LOADING
Tropic Trooper (aka Tropic Trooper, Earth Centaur) · APT Atlas
Actors
/
Nation-state / APT
/
Asia
Tropic Trooper
G0081
APT
CN · China
AKA
Earth Centaur · KeyBoy · Pirate Panda
MITRE
:
G0081
Targets
6
Sectors
6
Threat types
1
GIRs mapped
0/480
Active since
2011
Explore in atlas
Save actor
Share
Export
STIX 2.1
ATT&CK Navigator
Also tracked as
1 vendor names · 3 other aliases
Open Rosetta Stone
MITRE
G0081
UNATTRIBUTED ALIASES
Earth Centaur
KeyBoy
Pirate Panda
Victimology
Geographic footprint · 6 countries
Export STIX
origin · China
targeted countries · 6
ASIA ·
6
India
·
Japan
·
Mongolia
·
Philippines
·
Taiwan
·
Vietnam
Sectors targeted
6 of 40
Government
100 actors
Aerospace
58 actors
Technology
60 actors
NGOs & Dissidents
56 actors
Manufacturing (man)
49 actors
Dissidents (as targets)
16 actors
Tactics, techniques, procedures
Threat types + MITRE ATT&CK mapping
THREAT TYPES
ESP · Espionage
MITRE ATT&CK · 32 techniques
Initial Access
· 1
T1566.001
Spearphishing Attachment
Execution
· 3
T1059.003
Windows Command Shell
T1106
Native API
T1203
Exploitation for Client Execution
Persistence
· 3
T1543.003
Windows Service
Discovery
· 9
T1016
System Network Configuration Discovery
Lateral Movement
· 1
T1091
Replication Through Removable Media
Collection
· 1
T1119
Automated Collection
Exfiltration
· 1
T1020
Automated Exfiltration
Command And Control
· 5
T1071.001
Web Protocols
T1071.004
DNS
Stealth
· 8
T1027.003
Steganography
T1036.005
Match Legitimate Resource Name or Location
GIR mappings
0 / 480 requirements mapped
Open matrix
No GIRs mapped yet for this actor.
References
No supporting references have been recorded for this profile. Treat uncited claims as unverified.
Open data
Machine-readable exports of this profile
JSON · REST
Actor record
Full profile via the public v1 API
STIX 2.1
Intrusion-set bundle
Deterministic ids · techniques + targeted countries
ATT&CK NAVIGATOR
Technique layer
32 techniques · layer format 4.5
Related actors
By origin and actor type
Agrius
nation-state
Iran · 2 targets · since 2020
AppleJeus
nation-state
North Korea · 25 targets · since 2018
APT1
nation-state
China · 17 targets · since 2006
APT10
nation-state
China · 19 targets · since 2009
APT12
nation-state
China · 11 targets · since 2009
APT14
nation-state
China · 15 targets · since —
T1547.001
Registry Run Keys / Startup Folder
T1547.004
Winlogon Helper DLL
T1033
System Owner/User Discovery
T1046
Network Service Discovery
T1049
System Network Connections Discovery
T1057
Process Discovery
T1083
File and Directory Discovery
T1135
Network Share Discovery
T1518
Software Discovery
T1680
Local Storage Discovery
T1105
Ingress Tool Transfer
T1573
Encrypted Channel
T1573.002
Asymmetric Cryptography
T1055.001
Dynamic-link Library Injection
T1070.004
File Deletion
T1078.003
Local Accounts
T1140
Deobfuscate/Decode Files or Information
T1221
Template Injection
T1564.001
Hidden Files and Directories