Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-05 18:54:31 UTC Home > List all groups > List all tools > List all groups using tool RomeoAlfa Tool: RomeoAlfa Names RomeoAlfa AlphaNC Category Malware Type Reconnaissance, Backdoor, Info stealer, Exfiltration Description (IBM) ALPHANC is a backdoor which is capable of the following: • Collecting system information • Executing command line commands • Launching, listing, and terminating processes • Uploading and downloading files • Deleting files ALPHANC appears to be a lightweight variant of Duuzer based on similarities in functionality, capability, and style of how certain tasks are performed. Information Malpedia Last change to this tool card: 23 April 2020 Download this tool card in JSON format All groups using tool RomeoAlfa Changed Name Country Observed APT groups   Lazarus Group, Hidden Cobra, Labyrinth Chollima 2007-May 2025 https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=9703e296-4cb2-4510-aa80-655370d4d9a0 Page 1 of 2 1 group listed (1 APT, 0 other, 0 unknown) Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=9703e296-4cb2-4510-aa80-655370d4d9a0 https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=9703e296-4cb2-4510-aa80-655370d4d9a0 Page 2 of 2