ATT&CK

Threat actorsMITRE ATT&CK intrusion sets Malware & toolsSoftware families & tooling TechniquesTactics & techniques

ReportsPublished APT reporting SourcesEvery feed behind the archive

Developers

JSON APIFree CORS-enabled endpoints MCP serverModel Context Protocol access Source codeThis project on GitHub

Loading the archive…

Open Threat Intel Archive

Indicators are treated as facts and kept with their source_vendor, source URL, and dates; every feed is credited and redistribution-restricted feeds are flagged, not dropped. ATT&CK content is © MITRE, used under its terms. See NOTICE. The archive reports intelligence; it does not editorialize threat.

Indicators Actors Sources API GitHub

Open Threat Intel Archive

← Threat actors

G0134threat actor

Transparent Tribe

a.k.a. COPPER FIELDSTONE, APT36, Mythic Leopard, ProjectM

Transparent Tribe is a suspected Pakistan-based threat group that has been active since at least 2013, primarily targeting diplomatic, defense, and research organizations in India and Afghanistan.

MITRE ATT&CK ↗

Linked entities · 24

usesT1189Drive-by Compromise usesS0334DarkComet usesT1608.004Drive-by Target usesS0644ObliqueRAT usesT1204.002Malicious File usesT1027.013Encrypted/Encoded File usesT1568Dynamic Resolution usesT1584.001Domains usesS0385njRAT usesT1059.005Visual Basic usesT1566.002Spearphishing Link usesT1036.005Match Legitimate Resource Name or…usesT1583.001Domains usesT1564.001Hidden Files and Directories usesT1203Exploitation for Client Execution usesS0115Crimson usesT1566.001Spearphishing Attachment usesT1204.001Malicious Link usesS0643Peppy mentions by1d5729bed108a497Operation Transparent Tribe mentions by5a1a5668faa90151Transparent Tribe: Evolution anal…mentions by29d2f1792b0279f9Transparent Tribe: Evolution anal…mentions by7a88731754f10709Transparent Tribe campaign uses n…mentions byefecdf11c017e14fAnalysis of APT-C-56 (Transparent…