Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-05 18:16:14 UTC Home > List all groups > List all tools > List all groups using tool FireWood Tool: FireWood Names FireWood Category Malware Type Backdoor Description (ESET) The second backdoor, which we have named FireWood, is connected to Project Wood. The Windows version of the Project Wood backdoor was previously used by the Gelsemium group in Operation TooHash. Information Last change to this tool card: 26 December 2024 Download this tool card in JSON format All groups using tool FireWood Changed Name Country Observed APT groups Gelsemium 2014-2023 1 group listed (1 APT, 0 other, 0 unknown) Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=8d76443a-0ab4-413a-8947-6a7789f5cb4e https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=8d76443a-0ab4-413a-8947-6a7789f5cb4e Page 1 of 1