{
	"id": "f5ee80c9-b34b-4417-a51f-53959f7d9add",
	"created_at": "2026-04-06T00:16:46.950945Z",
	"updated_at": "2026-04-10T03:20:23.584919Z",
	"deleted_at": null,
	"sha1_hash": "1a77647afed14542130308bb9c70325dd11331b7",
	"title": "Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 45118,
	"plain_text": "Threat Group Cards: A Threat Actor Encyclopedia\nArchived: 2026-04-05 19:47:19 UTC\nHome \u003e List all groups \u003e List all tools \u003e List all groups using tool FrostyGoop\n Tool: FrostyGoop\nNames FrostyGoop\nCategory Malware\nType ICS malware\nDescription\n(Dragos) FrostyGoop is the ninth industrial control systems (ICS) specific malware. It is the\nfirst ICS-specific malware that uses Modbus TCP communications to achieve an impact on\nOperational Technology (OT). PIPEDREAM, an ICS malware discovered in 2022, uses\nModbus communications in one of its components for enumeration.\nInformation\nLast change to this tool card: 26 December 2024\nDownload this tool card in JSON format\nAll groups using tool FrostyGoop\nChanged Name Country Observed\nUnknown groups\n _[ Interesting malware not linked to an actor yet ]_\n1 group listed (0 APT, 0 other, 1 unknown)\nSource: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=b3c0bbae-809d-4bf0-917f-d52fe95f7812\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=b3c0bbae-809d-4bf0-917f-d52fe95f7812\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=b3c0bbae-809d-4bf0-917f-d52fe95f7812"
	],
	"report_names": [
		"listgroups.cgi?u=b3c0bbae-809d-4bf0-917f-d52fe95f7812"
	],
	"threat_actors": [],
	"ts_created_at": 1775434606,
	"ts_updated_at": 1775791223,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/1a77647afed14542130308bb9c70325dd11331b7.pdf",
		"text": "https://archive.orkl.eu/1a77647afed14542130308bb9c70325dd11331b7.txt",
		"img": "https://archive.orkl.eu/1a77647afed14542130308bb9c70325dd11331b7.jpg"
	}
}