Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 18:13:47 UTC
Home > List all groups > List all tools > List all groups using tool Grease
 Tool: Grease
Names Grease
Category Malware
Description
(Arbor) A tool to add a Windows administrator account with a specific username/password and
enable RDP, circumventing any firewall rules.
Information <https://www.netscout.com/blog/asert/stolen-pencil-campaign-targets-academia>
Malpedia <https://malpedia.caad.fkie.fraunhofer.de/details/win.grease>
Last change to this tool card: 23 April 2020
Download this tool card in JSON format
All groups using tool Grease
Changed Name Country Observed
APT groups
  Kimsuky, Velvet Chollima 2012-Aug 2025
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=80d11814-9e69-4248-a3f6-950785147f11
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=80d11814-9e69-4248-a3f6-950785147f11
Page 1 of 1