Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-05 20:45:43 UTC Home > List all groups > List all tools > List all groups using tool Dorshel Tool: Dorshel Names Dorshel Category Malware Type Backdoor Description (Symantec) In 2014, Symantec observed the Dragonfly group compromise legitimate software in order to deliver malware to victims, a practice also employed in the earlier 2011 campaigns. In the 2016 and 2017 campaigns the group is using the evasion framework Shellter in order to develop Trojanized applications. In particular, Backdoor.Dorshel was delivered as a trojanized version of standard Windows applications. Information Malpedia Last change to this tool card: 23 April 2020 Download this tool card in JSON format All groups using tool Dorshel Changed Name Country Observed APT groups   Energetic Bear, Dragonfly 2010-Mar 2022 1 group listed (1 APT, 0 other, 0 unknown) Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=c73361f3-21a6-44da-9c68-ae1cdd429368 https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=c73361f3-21a6-44da-9c68-ae1cdd429368 Page 1 of 1