PittyTiger is a China-based threat actor associated with operations targeting Taiwan. Its documented tradecraft includes attempts to obtain legitimate account credentials during intrusions and the acquisition and use of credential-dumping tools such as Mimikatz and gsecdump. These activities support credential theft and account compromise within victim environments.
Who, where, and from where this actor operates. Pulled from open-source reporting and Mallory's analyst review.
Sectors the actor has been observed targeting.
Geographies tied to known operations.
Attributed origin per open-source reporting.
12 distinct techniques observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt.
2 malware families Mallory has associated with this actor across public reporting.
20 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.