← Back to all campaigns
ActiveMITRE ATT&CK

C0011

C0011 was a suspected cyber espionage campaign conducted by Transparent Tribe that targeted students at universities and colleges in India. Security researchers noted this campaign against students was a significant shift from Transparent Tribe's historic targeting Indian government, military, and think tank personnel, and assessed it was still ongoing as of July 2022.

First observedDec 1, 2021
Last observedJul 1, 2022
Attributed actors1
Source-backed events3
Attribution

Who has been linked to this activity

Each relationship retains its own confidence and source.

Source ReportedActive actor

Transparent Tribe

Transparent Tribe is a suspected Pakistan-based threat group that has been active since at least 2013, primarily targeting diplomatic, defense, and research organizations in India and Afghanistan.

mitre-attckReview source
Activity

Campaign timeline

Every date says what it measures so catalog dates are not confused with publication dates.

Cataloged
Attribution

Transparent Tribe attributed to this campaign

Attribution confidence: Source Reported.

Last observed
Campaign

C0011 last observed

The campaign source marks this as the latest known activity date.

MITRE ATT&CKSource
First observed
Campaign

C0011 first observed

The campaign source marks this as the beginning of the known activity window.

MITRE ATT&CKSource
About the context below

CVEs, techniques, malware, and indicators in the sections below are associated with an attributed actor. They are useful investigative context, but the campaign source does not necessarily link every item directly to this campaign.

Investigation context

What the attributed actors are known to use

Use this material to guide hunting and prioritization, then confirm each relationship against its cited source.

Related vulnerabilities 0

No linked CVEs are available.

ATT&CK techniques 14

Malware and tools 5

  • CrimsonMalware | Transparent Tribe
  • DarkCometMalware | Transparent Tribe
  • ObliqueRATMalware | Transparent Tribe
  • PeppyMalware | Transparent Tribe
  • njRATMalware | Transparent Tribe

Indicators 0

No source-linked indicators are available.

Sources

Evidence behind this page

Open the original material before making an attribution or response decision.