Adversary: Viceroy Tiger - Threat Actor | Crowdstrike Adversary Universe

Adversary

Viceroy Tiger

Origins

India

Community identifiers

Operation Hangover, Appin, APT-C-35, Donot

Viceroy Tiger is an adversary with a nexus to India that has historically targeted entities throughout multiple sectors.

Older activity targeted multiple sectors and countries; however, since 2015 this adversary appears to focus on entities in Pakistan with a particular focus on government and security organizations. This adversary consistently leverages spear phishing emails containing malicious Microsoft Office documents, malware designed to target the Android mobile platform, and phishing activity designed to harvest user credentials.

Recent Activity

In the first half of 2020, CrowdStrike Intelligence continued to observe activity from Viceroy Tiger. The activity continued to deploy its custom BackConfig malware via malicious Office documents, as well as its customer KnSpy malware for Android. In the latter half of the year, the adversary has incorporated additional exploitation techniques into its portfolio, including the use of remote template injection for greater stealth. Targeting is assessed to still have a primary focus on Pakistan with additional targeting throughout other parts of South Asia.

Target Nations

  • Flag Icon of the country Afghanistan

    Afghanistan

  • Flag Icon of the country Australia

    Australia

  • Flag Icon of the country Canada

    Canada

  • Flag Icon of the country China

    China

  • Flag Icon of the country India

    India

  • Flag Icon of the country Iran

    Iran

  • Flag Icon of the country Norway

    Norway

  • Flag Icon of the country Oman

    Oman

  • Flag Icon of the country Pakistan

    Pakistan

  • Flag Icon of the country Russian Federation

    Russian Federation

  • Flag Icon of the country Saudi Arabia

    Saudi Arabia

  • Flag Icon of the country Singapore

    Singapore

  • Flag Icon of the country Taiwan

    Taiwan

  • Flag Icon of the country Turkey

    Turkey

  • Flag Icon of the country United Arab Emirates

    United Arab Emirates

  • Flag Icon of the country United Kingdom

    United Kingdom

  • Flag Icon of the country United States

    United States