Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 21:17:39 UTC
Home > List all groups > List all tools > List all groups using tool nbtscan
 Tool: nbtscan
Names
nbtscan
NBTscan
Category Tools
Type Reconnaissance
Description
Nbtscan is a program for scanning IP networks for NetBIOS name information. It sends
Net‐BIOS status query to each address in supplied range and lists received information
in human readable form. For each responded host it lists IP address, NetBIOS computer
name, logged-in user name and MAC address (such as Ethernet).
Information
MITRE ATT&CK Last change to this tool card: 30 December 2022
Download this tool card in JSON format
All groups using tool nbtscan
Changed Name Country Observed
APT groups
 Calypso 2016-Aug 2021
 Chafer, APT 39 2014-Sep 2020
 Earth Lusca 2019-Sep 2024
 Gallium 2018-Jun 2022
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=8b0e49d2-19f9-439f-ada2-4a5c5376adfa
Page 1 of 2

Goblin Panda, Cycldek, Conimes 2013-Jun 2020  
  Ke3chang, Vixen Panda, APT 15, GREF, Playful Dragon 2010-Oct 2024  
  Mustang Panda, Bronze President 2012-Jun 2025  
  Naikon, Lotus Panda 2010-Apr 2022  
  Operation Diplomatic Specter 2022  
  Operation Harvest 2016  
  Salt Typhoon, GhostEmperor 2020-Feb 2025
  Stone Panda, APT 10, menuPass 2006-Mar 2025
  TaskMasters 2010-May 2021  
  Turla, Waterbug, Venomous Bear 1996-2024  
  UNC215 2019  
  Worok 2020  
16 groups listed (16 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=8b0e49d2-19f9-439f-ada2-4a5c5376adfa
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=8b0e49d2-19f9-439f-ada2-4a5c5376adfa
Page 2 of 2