Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-05 19:37:58 UTC Home > List all groups > List all tools > List all groups using tool Helauto Tool: Helauto Names Helauto Category Malware Type Backdoor, Exfiltration Description This family of malware is designed to operate as a service and provides remote command execution and file transfer capabilities to a fixed IP address or domain name. All communication with the C2 server happens over port 443 using SSL. This family can be installed as a service DLL. Some variants allow for uninstallation. Information Malpedia Last change to this tool card: 23 April 2020 Download this tool card in JSON format All groups using tool Helauto Changed Name Country Observed APT groups   Comment Crew, APT 1 2006-May 2018 1 group listed (1 APT, 0 other, 0 unknown) Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=985e0fb9-885b-498a-933c-b98b30dc4684 https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=985e0fb9-885b-498a-933c-b98b30dc4684 Page 1 of 1