Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-05 16:49:51 UTC Home > List all groups > List all tools > List all groups using tool SniffPass Tool: SniffPass Names SniffPass Category Tools Type Credential stealer Description SniffPass is a portable tool which can capture network traffic, then detect and display the passwords for the following protocols: POP3, IMAP4, SMTP, FTP, and HTTP (basic authentication passwords). Information Last change to this tool card: 20 April 2020 Download this tool card in JSON format All groups using tool SniffPass Changed Name Country Observed APT groups   Kimsuky, Velvet Chollima 2012-Aug 2025 1 group listed (1 APT, 0 other, 0 unknown) Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=9ec78e89-7ab5-4f4f-ad62-464294fb4b9f https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=9ec78e89-7ab5-4f4f-ad62-464294fb4b9f Page 1 of 1