Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-06 15:28:38 UTC
Home > List all groups > List all tools > List all groups using tool TeamSpy
 Tool: TeamSpy
Names
TeamSpy
TVSpy
TVRAT
SpY-Agent
TeamViewerENT
Category Malware
Type Backdoor
Description
(Avast) TeamSpy infects computers by tricking people into downloading a malicious
attachment and enabling macros. After that, the malware secretly installs TeamViewer, giving
the cybercriminals full control of the infected computer.
Information
<https://blog.avast.com/a-deeper-look-into-malware-abusing-teamviewer>
<https://blog.trendmicro.com/trendlabs-security-intelligence/unsupported-teamviewer-versions-exploited-backdoors-keylogging>
<https://www.cyber.nj.gov/threat-center/threat-profiles/trojan-variants/spy-agent>
Malpedia <https://malpedia.caad.fkie.fraunhofer.de/details/win.teamspy>
Last change to this tool card: 24 April 2021
Download this tool card in JSON format
All groups using tool TeamSpy
Changed Name Country Observed
APT groups
  TA530 [Unknown] 2016-Nov 2016  
  TeamSpy Crew 2010-Feb 2017  
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=279fa508-a023-488b-b8bf-8c4d5e38ecb4
Page 1 of 2

2 groups listed (2 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=279fa508-a023-488b-b8bf-8c4d5e38ecb4
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=279fa508-a023-488b-b8bf-8c4d5e38ecb4
Page 2 of 2