Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 20:45:20 UTC
Home > List all groups > List all tools > List all groups using tool RevSocks
 Tool: RevSocks
Names RevSocks
Category Malware
Type Tunneling
Description
(ClearSky) RevSocks is a tool that enables threat actors to establish a connection with a server
via SOCKS proxy. This can be employed by attackers for data exfiltration, command and
control, or for maintaining persistent access in a compromised network.
Information <https://www.clearskysec.com/wp-content/uploads/2024/01/No-Justice-Wiper.pdf>
Last change to this tool card: 17 January 2024
Download this tool card in JSON format
All groups using tool RevSocks
Changed Name Country Observed
APT groups
  HomeLand Justice 2022-Jan 2024  
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=033eb1cb-1eae-4ffc-8fa0-b37b4461fd39
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=033eb1cb-1eae-4ffc-8fa0-b37b4461fd39
Page 1 of 1