Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-06 02:53:01 UTC
Home > List all groups > List all tools > List all groups using tool FlowerPower
 Tool: FlowerPower
Names
FlowerPower
BoBoStealer
Category Malware
Type Reconnaissance
Description (Cybereason) Powershell based profiling tool.
Information
<https://www.cybereason.com/blog/back-to-the-future-inside-the-kimsuky-kgh-spyware-suite>
<https://www.pwc.co.uk/cyber-security/pdf/pwc-cyber-threats-2020-a-year-in-retrospect.pdf>
<https://vblocalhost.com/uploads/VB2020-46.pdf>
Malpedia <https://malpedia.caad.fkie.fraunhofer.de/details/ps1.flowerpower>
Last change to this tool card: 28 December 2022
Download this tool card in JSON format
All groups using tool FlowerPower
Changed Name Country Observed
APT groups
  Kimsuky, Velvet Chollima 2012-Aug 2025
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=cfd84b42-cc26-4000-bce9-fd0816275c98
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=cfd84b42-cc26-4000-bce9-fd0816275c98
Page 1 of 1