Thrip
- ID
- G0076
- Source
- attack.mitre.org
- MITRE last modified
- 1 Aug 2026
Thrip is an espionage group that has targeted satellite communications, telecoms, and defense contractor companies in the U.S. and Southeast Asia. The group uses custom malware as well as "living off the land" techniques. [1]
Techniques used (4)
- T1048.003 Exfiltration Over Unencrypted Non-C2 Protocol
- T1059.001 PowerShell
- T1219.002 Remote Desktop Software
- T1588.002 Tool