Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 12:38:51 UTC
Home > List all groups > List all tools > List all groups using tool Limepad
 Tool: Limepad
Names Limepad
Category Malware
Type Exfiltration
Description
(ZScaler) We recently identified a new and previously undocumented data exfiltration tool
used by this APT group. It is distributed as a Python-based application packaged inside a
VHDX file. Based on the unique strings present in the first iteration of this stealer, we have
named it LimePad.
Information
<https://www.zscaler.com/blogs/security-research/apt-36-uses-new-ttps-and-new-tools-target-indian-governmental-organizations>
Malpedia <https://malpedia.caad.fkie.fraunhofer.de/details/win.limepad>
Last change to this tool card: 22 June 2023
Download this tool card in JSON format
All groups using tool Limepad
Changed Name Country Observed
APT groups
  Transparent Tribe, APT 36 2013-Mar 2025  
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=1dc3ff6f-c888-4476-8e8b-99223970781c
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=1dc3ff6f-c888-4476-8e8b-99223970781c
Page 1 of 1