Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-05 19:28:13 UTC Home > List all groups > List all tools > List all groups using tool Circles Tool: Circles Names Circles Category Malware Type Info stealer Description (Citizen Lab) Unlike NSO Group’s Pegasus spyware, the SS7 mechanism by which Circles’ product reportedly operates does not have an obvious signature on a target’s phone, such as the telltale targeting SMS bearing a malicious link that is sometimes present on a phone targeted with Pegasus. Information MITRE ATT&CK Last change to this tool card: 30 December 2022 Download this tool card in JSON format All groups using tool Circles Changed Name Country Observed Other groups Circles 2015 1 group listed (0 APT, 1 other, 0 unknown) Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=bd3bf219-1fbd-404b-abdf-8ba81d64822f https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=bd3bf219-1fbd-404b-abdf-8ba81d64822f Page 1 of 1