Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 18:15:40 UTC
Home > List all groups > List all tools > List all groups using tool ScarCruft
 Tool: ScarCruft
Names
ScarCruft
StarCruft
Category Exploits
Description
(Kaspersky) The exploitation process consists of three Flash objects. The Flash object that
triggers the vulnerability in Adobe Flash Player is located in second SWF delivered to the
victim.
Information Malpedia Last change to this tool card: 28 December 2022
Download this tool card in JSON format
All groups using tool ScarCruft
Changed Name Country Observed
APT groups
 Reaper, APT 37, Ricochet Chollima, ScarCruft 2012-Mar 2025
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=94bd2859-17a3-49c9-9b19-86511c43c848
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=94bd2859-17a3-49c9-9b19-86511c43c848
Page 1 of 1