Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-05 22:03:51 UTC Home > List all groups > List all tools > List all groups using tool XDDown Tool: XDDown Names XDDown Category Malware Type Downloader Description (ESET) XDDown is nothing but a downloader – hence our chosen name. This architecture choice is quite different from what we see in other APT malware frameworks, which tend to be quite complex with a whole set of backdoor commands and a logging mechanism. On one hand, the XDSpy approach is easier to develop but, on the other hand, it is much less flexible for the operators as a new binary needs to be built, downloaded and executed to perform any action on the compromised machine. Information Last change to this tool card: 19 October 2020 Download this tool card in JSON format All groups using tool XDDown Changed Name Country Observed APT groups   XDSpy [Unknown] 2011-Jul 2024   1 group listed (1 APT, 0 other, 0 unknown) Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=ab6d109c-f316-4be7-9c50-d765ab3be7a7 https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=ab6d109c-f316-4be7-9c50-d765ab3be7a7 Page 1 of 1