Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-05 20:48:35 UTC Home > List all groups > List all tools > List all groups using tool CamCapture Plugin Tool: CamCapture Plugin Names CamCapture Plugin Category Malware Type Exfiltration Description (Cylance) This Win32 PE DLL arrives in a partially obfuscated form with its entry point obscured by garbage opcodes, useless instructions, and non-linear code flow. It exports several functions that can possibly be invoked with the use of Roland backdoor’s run_dll command. Most of these exports provide various screenshot and video capture functionality. Information Last change to this tool card: 20 April 2020 Download this tool card in JSON format All groups using tool CamCapture Plugin Changed Name Country Observed APT groups   APT 32, OceanLotus, SeaLotus 2013-Aug 2024 1 group listed (1 APT, 0 other, 0 unknown) Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=f02f03d7-3d90-4cb2-8774-dd53a2718b70 https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=f02f03d7-3d90-4cb2-8774-dd53a2718b70 Page 1 of 1