Skip to content
skopnix
Section B · Adversaries · Dossier
← Adversaries

File · PittyTiger · Unknown · mitre-attack · refreshed 2026-10-06

PittyTiger

MITRE G0011 ↗

PittyTiger — ATT&CK rosePI

attack rose · 2 techniques across 2 tactics

Analyst brief

mitre-attack

PittyTiger is a threat group believed to operate out of China that uses multiple different types of malware to maintain command and control.

Kill chain

MITRE ATT&CK Enterprise · tap a technique

2 techniques · 2 of 15 tactics

  1. Resource development

    1 technique

  2. Stealth

    1 technique

select a technique

Arsenal

3 malware · 2 tools
Malware
Malware · 3ATT&CK
gh0st RATS0032 ↗
LuridS0010 ↗
PoisonIvyS0012 ↗
Tools
Tools · 2ATT&CK
gsecdumpS0008 ↗
MimikatzS0002 ↗

as stated by MITRE ATT&CK · “shared by” counts roster dossiers citing the same S-id

Take it with you

keyless · no signup

References

3 sources
  1. 1.attack.mitre.org/groups/G0011
  2. 2.airbus-cyber-security.com/the-eye-of-the-tiger
  3. 3.fireeye.com/blog/threat-research/2014/07/spy-of-the-tiger.html

Track PittyTiger on the wire.

This dossier is already data: the keyless actor API and a STIX 2.1 bundle. Mentions on the wire reach Telegram and RSS as they land.

Follow on TelegramKEV RSSAPI

Check your stack

Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.

Stack checkNo key. No signup.