Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 13:24:21 UTC
Home > List all groups > List all tools > List all groups using tool PlugX
 Tool: PlugX
Names
PlugX
Destroy RAT
DestroyRAT
Korplug
Sogu
Kaba
Xamtrav
Agent.dhwf
RedDelta
TIGERPLUG
Thoper
TVT
Category Malware
Type Reconnaissance, Backdoor, Keylogger, Info stealer, Exfiltration
Description
(US-CERT) PLUGX is a sophisticated Remote Access Tool (RAT) operating since
approximately 2012. Although there are now many variants of this RAT in existence
today, there are still characteristics common to most variants.
Information https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=20865c5a-3bb0-413b-b59b-9a994303a9c9
Page 1 of 4

MITRE ATT&CK Malpedia AlienVault OTX Playbook Last change to this tool card: 22 February 2025
Download this tool card in JSON format
All groups using tool PlugX
Changed Name Country Observed
APT groups
 APT 3, Gothic Panda, Buckeye 2007-Nov 2017
 APT 17, Deputy Dog, Elderwood, Sneaky Panda 2009-Jun 2024
 APT 20, Violin Panda 2014-2017
 APT 31, Judgment Panda, Zirconium 2016-Mar 2024
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=20865c5a-3bb0-413b-b59b-9a994303a9c9
Page 2 of 4

APT 41 2012-Jul 2025
  AVIVORE 2015  
  Axiom, Group 72 2008-2008/2014  
  Barium 2016-Nov 2017
  Bookworm 2015  
  Bronze Starlight 2021-Mar 2023  
  Calypso 2016-Aug 2021  
  Carderbee 2023  
  CardinalLizard 2014  
  DragonOK 2015-Jan 2017  
  Earth Berberoka 2022  
  Earth Krahang 2022  
  Emissary Panda, APT 27, LuckyMouse, Bronze Union 2010-Aug 2023  
  Goblin Panda, Cycldek, Conimes 2013-Jun 2020  
  IronHusky 2017-Aug 2021  
  Leviathan, APT 40, TEMP.Periscope 2013-Jul 2021
  Mustang Panda, Bronze President 2012-Jun 2025  
  Naikon, Lotus Panda 2010-Apr 2022  
  NetTraveler, APT 21, Hammer Panda 2004-Dec 2015  
  Nightshade Panda, APT 9, Group 27 2013-Sep 2016  
  Operation Diplomatic Specter 2022  
  Operation Harvest 2016  
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=20865c5a-3bb0-413b-b59b-9a994303a9c9
Page 3 of 4

Operation Jacana 2023  
  RedDelta 2020-Jul 2023  
  RedFoxtrot 2014-Aug 2021  
  RedGolf 2014  
  Roaming Tiger 2014-Aug 2015  
  Samurai Panda 2009  
  Space Pirates 2017-Nov 2024  
  Stone Panda, APT 10, menuPass 2006-Mar 2025
  TA428 2013-Jan 2022  
  TA459 2017-Apr 2022  
 
Turbine Panda, APT 26, Shell Crew, WebMasters, KungFu
Kittens
2010-Oct 2018
  Velvet Ant 2023-Jul 2024  
  Wicked Spider, APT 22 2018  
39 groups listed (39 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=20865c5a-3bb0-413b-b59b-9a994303a9c9
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=20865c5a-3bb0-413b-b59b-9a994303a9c9
Page 4 of 4

Naikon, Lotus NetTraveler, Panda APT 21, Hammer Panda 2010-Apr 2022 2004-Dec 2015
Nightshade Panda, APT 9, Group 27 2013-Sep 2016
Operation Diplomatic Specter  2022
Operation Harvest  2016
  Page 3 of 4