Cyble provides a threat actor profile for TransparentTribe (aka Mythic Leopard and APT36), a suspected-Pakistan advanced persistent threat (APT). They provide an overview of TransparentTribe's attack chain. While Cyble elaborates on reconnaissance, resource development, initial access (malvertising and phishing/social engineering), they stop after execution/persistence. Known exploited vulnerabilities are listed, as well as known tools/malware used. This APT targets Windows and Linux systems and even Android (malicious APKs). While Cyble provides MITRE ATT&CK TTP charting, no IOC are listed. 🔗 https://cyble.com/blog/threat-actor-profile-transparenttribe/

#cyberespionage #TransparentTribe #MythicLeopard #APT #Pakistan #threatintel #IOC