Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-06 00:27:35 UTC Home > List all groups > List all tools > List all groups using tool UNITEDRAKE Tool: UNITEDRAKE Names UNITEDRAKE Category Malware Type Backdoor Description One implant, codenamed UNITEDRAKE, can be used with a variety of “plug-ins” that enable the agency to gain total control of an infected computer,” states The Intercept. “GROK is used to log keystrokes.” Information Last change to this tool card: 20 April 2020 Download this tool card in JSON format All groups using tool UNITEDRAKE Changed Name Country Observed APT groups Equation Group 2001-Aug 2016 1 group listed (1 APT, 0 other, 0 unknown) Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=20865495-bf29-4cbe-b09b-877bea38ab45 https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=20865495-bf29-4cbe-b09b-877bea38ab45 Page 1 of 1