Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-02 11:31:51 UTC Home > List all groups > List all tools > List all groups using tool MirrorBlast Tool: MirrorBlast Names MirrorBlast Category Malware Type Downloader, Loader Description According to Minerva Labs, MirrorBlast malware is a trojan that is known for attacking users’ browsers. It usually pretends to be a legitimate browser add-on however it has now evolved additional capabilities, whereby other malwares are installed simultaneously. Recently, this trojan is thought to have tentative links to TA505 and PYSA groups. Information Malpedia Last change to this tool card: 30 November 2023 Download this tool card in JSON format All groups using tool MirrorBlast Changed Name Country Observed APT groups TA505, Graceful Spider, Gold Evergreen 2006-Nov 2022 1 group listed (1 APT, 0 other, 0 unknown) Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=65acc33f-e402-4d39-a4a4-2a0fb7834f50 https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=65acc33f-e402-4d39-a4a4-2a0fb7834f50 Page 1 of 1