Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 16:02:08 UTC
Home > List all groups > List all tools > List all groups using tool Casper
 Tool: Casper
Names Casper
Category Malware
Type Reconnaissance
Description
(ESET) Casper was used against Syrian targets in April 2014, which makes it the most recent
malware from this group publicly known at this time. To attack their targets, Casper’s
operators used zero-day exploits in Adobe Flash, and these exploits were – surprisingly –
hosted on a Syrian governmental website. Casper is a well-developed reconnaissance tool,
making extensive efforts to remain unseen on targeted machines. Of particular note are the
specific strategies adopted against antimalware software.
Information
Malpedia Last change to this tool card: 23 April 2020
Download this tool card in JSON format
All groups using tool Casper
Changed Name Country Observed
APT groups
 Snowglobe, Animal Farm 2011
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=d15a2bbb-dd31-42b2-94a2-8a82cfe06900
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=d15a2bbb-dd31-42b2-94a2-8a82cfe06900
Page 1 of 1