Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-02 11:11:53 UTC
Home > List all groups > List all tools > List all groups using tool Meterpreter
 Tool: Meterpreter
Names Meterpreter
Category Tools
Type Loader
Description
Meterpreter is an advanced, dynamically extensible payload that uses in-memory DLL
injection stagers and is extended over the network at runtime. It communicates over the
Metasploit Stager socket and provides a comprehensive client-side Ruby API. It features
command history, tab completion, channels, and more.
Meterpreter was originally written by skape for Metasploit 2.x, common extensions were
merged for 3.x and is currently undergoing an overhaul for Metasploit 3.3. The server
portion is implemented in plain C and is now compiled with MSVC, making it somewhat
portable. The client can be written in any language but Metasploit has a full-featured
Ruby client API.
Information
Malpedia
AlienVault OTX Last change to this tool card: 29 December 2022
Download this tool card in JSON format
All groups using tool Meterpreter
Changed Name Country Observed
APT groups
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=764acaf2-f0a0-4e7c-9933-d556cf0eb645
Page 1 of 2

APT 41 2012-Jul 2025
  FIN6, Skeleton Spider [Unknown] 2015-Oct 2021
  FIN7 2013-Jul 2024
  FIN11 [Unknown] 2016-Mar 2025
  GCMAN 2016  
  MuddyWater, Seedworm, TEMP.Zagros, Static Kitten 2017-Jul 2025
  Silence, Contract Crew [Unknown] 2016-Aug 2022  
  Tomiris [Unknown] 2020  
  Turla, Waterbug, Venomous Bear 1996-2024  
  YoroTrooper 2022  
10 groups listed (10 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=764acaf2-f0a0-4e7c-9933-d556cf0eb645
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=764acaf2-f0a0-4e7c-9933-d556cf0eb645
Page 2 of 2