Mythic Leopard

Mythic Leopard, also known as Transparent Tribe, APT36, and ProjectM, is a threat actor group likely serving the strategic intelligence requirements of the Pakistani state. The group has been active since at least 2013, demonstrating prolific activity in cyber espionage. The group primarily targets nations such as India, Pakistan, the United States, and the United Kingdom. Their operations often involve creating fake domains that mimic legitimate military and defense organizations, indicating a sophisticated approach to infiltration and data theft. The cybersecurity community has noted overlaps between Mythic Leopard and another group known as Cosmic Leopard. However, as of the current date, there is not enough technical evidence to definitively link these two threat actors. This uncertainty highlights the complex and often opaque nature of cyber threats, where attribution can be challenging due to shared tactics, techniques, and procedures (TTPs) among different groups. Security vendors have variously tracked this group under different names including Transparent Tribe, Operation C-Major, Earth Karkaddan, and Mythic Leopard. CrowdStrike, a leading cybersecurity firm, recognized Mythic Leopard as their "Adversary of the Month" for May, underscoring the significant threat posed by this group. As the landscape of cyber threats continues to evolve, understanding and tracking the activities of groups like Mythic Leopard remains critical for national security and cyber defense.