Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-06 02:58:12 UTC
Home > List all groups > List all tools > List all groups using tool Cryptcat
 Tool: Cryptcat
Names Cryptcat
Category Tools
Type Tunneling
Description
(FireEye) Four files tested in 2014 are based on the open-source project, cryptcat. Analysis of
these cryptcat binaries indicates that the actor continually modified them to decrease AV
detection rates. One of these files was deployed in a TEMP.Veles target’s network. The
compiled version with the least detections was later re-tested in 2017 and deployed less than a
week later during TEMP.Veles activities in the target environment.
Information
Last change to this tool card: 20 April 2020
Download this tool card in JSON format
All groups using tool Cryptcat
Changed Name Country Observed
APT groups
 TEMP.Veles 2014-Mar 2022
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=8321ac32-dc29-4d0e-a9dd-c626178fb3ee
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=8321ac32-dc29-4d0e-a9dd-c626178fb3ee
Page 1 of 1