Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 12:50:23 UTC
 Tool: FRP
Names
FRP
Fast Reverse Proxy
Category Tools
Type Tunneling
Description
A fast reverse proxy to help you expose a local server behind a NAT or firewall to the
internet.
Information <https://github.com/fatedier/frp>
MITRE ATT&CK <https://attack.mitre.org/software/S1144>
Last change to this tool card: 27 December 2024
Download this tool card in JSON format
All groups using tool FRP
Changed Name Country Observed
APT groups
  ChamelGang 2021-Jun 2023  
  Dalbit 2022  
  Earth Lusca 2019-Sep 2024  
  LightBasin 2016  
  Magic Hound, APT 35, Cobalt Illusion, Charming Kitten 2012-Jun 2025
  Parisite, Fox Kitten, Pioneer Kitten 2017-Nov 2020  
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=40aa86cf-c9db-45bf-ba42-24b3384d7862
Page 1 of 2

TAG-38 2021  
  ToddyCat 2020-2024  
  Volt Typhoon 2020-Aug 2025
9 groups listed (9 APT, 0 other, 0 unknown)
↑
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=40aa86cf-c9db-45bf-ba42-24b3384d7862
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=40aa86cf-c9db-45bf-ba42-24b3384d7862
Page 2 of 2