Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-05 12:45:53 UTC Home > List all groups > List all tools > List all groups using tool PLANKWALK Tool: PLANKWALK Names PLANKWALK Category Malware Type Backdoor Description (Mandiant) UNC2970 largely employs the PLANKWALK backdoor during phishing operations as well as other malware families that share code with multiple tools leveraged by UNC577. Information Last change to this tool card: 25 April 2023 Download this tool card in JSON format All groups using tool PLANKWALK Changed Name Country Observed APT groups   Lazarus Group, Hidden Cobra, Labyrinth Chollima 2007-May 2025 1 group listed (1 APT, 0 other, 0 unknown) Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=6595da50-1a03-4915-ad0c-ecfd1eaf4ccc https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=6595da50-1a03-4915-ad0c-ecfd1eaf4ccc Page 1 of 1