Mirage Tiger


Formerly tracked as the WiseGuy activity cluster, MIRAGE TIGER represents a targeted intrusion adversary with a nexus to India that has consistently targeted Pakistani government and military related entities since at least 2017. Identified MIRAGE TIGER operations have relied on the use of remotely hosted, password-protected Microsoft Office documents containing malicious macros for ...

Community Identifiers



  • pdgbVHkIQnjCGB23lsMmoec


  • TG50AUDBr6y93Qv

Contact our team about
IOCs for this adversary


During a cybersecurity incident, indicators of compromise (IoC) are clues and evidence of a data breach.