Loading malware…
Merlin Mythic refers here to the Merlin agent used via the Mythic C2 framework. In the provided reporting, it is not the primary malware under analysis but a previously used backdoor associated with Tropic Trooper. Zscaler ThreatLabz states that earlier TOSHIS loader campaigns delivered either a Cobalt Strike Beacon or a Merlin Mythic agent, whereas the newer campaign shifted to an AdaptixC2 beacon with a custom GitHub-based listener. The content links this historical Merlin Mythic usage to Tropic Trooper, also tracked as Earth Centaur and Pirate Panda. No additional high-confidence technical details, infection vectors, configuration, or indicators specific to the Merlin Mythic agent itself are provided beyond its prior use as a backdoor payload in earlier TOSHIS versions.
Mallory pivots from this family to the IOCs, detections, and named campaigns that touch your stack, and pages you when something new lands.
1 distinct threat actor attributed by public researchers. Open in Mallory to see the full evidence chain and overlapping campaigns.
Rather than relying on previously used backdoors like Cobalt Strike Beacon or Merlin Mythic agents, Tropic Trooper has now shifted to using the open-source AdaptixC2 framework, with a custom beacon listener built on top of it.
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
An offensive agent/framework referenced as part of Tropic Trooper’s previously used backdoor toolset before the shift to AdaptixC2.
An agent previously delivered by earlier TOSHIS loader variants, mentioned here for comparison with the current campaign's use of AdaptixC2 Beacon.
Match every observed IP, domain, and hash against your live telemetry.
Named campaigns wielding this family, with evidence pinned to each claim.
CVEs this family uses for access and lateral movement.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Every documented technique, ranked by evidence weight.
Reddit, Mastodon, and CTI community discussion around this family.