Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-05 22:51:20 UTC Home > List all groups > List all tools > List all groups using tool Viper Tool: Viper Names Viper Category Tools Type Vulnerability scanner Description (Cluster25) Viper is a graphical penetration tool, which modularizes and weaponizes the tactics and technologies commonly used in the process of Intranet penetration. As stated in its Github page, Viper integrates 80+ modules, covering almost all the known Techniques (such as Resource Development, Initial Access, Execution, Persistence and so on). Like Cobalt Strike, Viper allows easy payload generation, such as Meterpreter, ReverseShell and other custom beacons. Information Last change to this tool card: 03 May 2022 Download this tool card in JSON format All groups using tool Viper Changed Name Country Observed APT groups Naikon, Lotus Panda 2010-Apr 2022 1 group listed (1 APT, 0 other, 0 unknown) Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=6f53f6e0-56d9-4e8f-a988-78ed6c348b2f https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=6f53f6e0-56d9-4e8f-a988-78ed6c348b2f Page 1 of 1