Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 20:28:48 UTC
Home > List all groups > List all tools > List all groups using tool Gon
 Tool: Gon
Names Gon
Category Malware
Type Reconnaissance, Remote command, Info stealer, Exfiltration
Description
(Palo Alto) At a high level, the Gon tool allows the actor to scan for open ports on remote
systems, upload and download files, take screenshots, find other systems on the network, run
commands on remote systems and create a Remote Desktop Protocol (RDP) session. The actor
can use Gon as a command-line utility or by using a Graphical User Interface (GUI).
Information
Last change to this tool card: 29 April 2020
Download this tool card in JSON format
All groups using tool Gon
Changed Name Country Observed
APT groups
 xHunt 2018-Aug 2019
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=fd4ddff0-6e52-43bd-88bf-2b6dcdcbb5d8
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=fd4ddff0-6e52-43bd-88bf-2b6dcdcbb5d8
Page 1 of 1