aol.pm

PittyTiger

IntrusionSet · ATTACK:enterprise:G0011

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:enterprise:G0011",
  "title": "PittyTiger",
  "type": "IntrusionSet",
  "source_url": "https://attack.mitre.org/groups/G0011",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "intrusion-set--fe98767f-9df8-42b9-83c9-004b1dec8647",
  "external_id": "G0011",
  "domain": "enterprise",
  "created": "2017-05-31T21:31:50.198Z",
  "modified": "2026-07-31T20:48:53.544Z",
  "version": "1.2",
  "aliases": [
    "PittyTiger"
  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "PittyTiger"
    },
    {
      "source_name": "Bizeul 2014",
      "url": "https://airbus-cyber-security.com/the-eye-of-the-tiger/"
    },
    {
      "source_name": "Villeneuve 2014",
      "url": "https://www.fireeye.com/blog/threat-research/2014/07/spy-of-the-tiger.html"
    }
  ]
}

Explicit source assertions (7)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:G0011 → uses → ATTACK:enterprise:S0032

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3f780c76-b5d5-43f9-b4f2-048106f00894

Bizeul 2014 · Villeneuve 2014

ATTACK:enterprise:G0011 → uses → ATTACK:enterprise:S0010

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--71416f0d-b037-48b2-a14d-acb1a5f3a4a4

Villeneuve 2014

ATTACK:enterprise:G0011 → uses → ATTACK:enterprise:S0008

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7ed93170-2dba-4e59-b0f0-7c716c73bdc0

Bizeul 2014

ATTACK:enterprise:G0011 → uses → ATTACK:enterprise:T1588.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--86169d65-b154-402d-918c-4b4602d71cd0

Bizeul 2014

ATTACK:enterprise:G0011 → uses → ATTACK:enterprise:S0012

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8d65162b-650d-4a38-9c19-cc6c8e85a2e9

Villeneuve 2014

ATTACK:enterprise:G0011 → uses → ATTACK:enterprise:T1078

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--93b12e1a-7f21-4fa0-9b2a-c96c7c270625

Bizeul 2014

ATTACK:enterprise:G0011 → uses → ATTACK:enterprise:S0002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--cc831c63-94af-4937-b8e6-668591ec7d04

Bizeul 2014

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.