Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 21:49:24 UTC
Home > List all groups > List all tools > List all groups using tool ASPXSpy
 Tool: ASPXSpy
Names
ASPXSpy
ASPXTool
Category Malware
Type Backdoor
Description
ASPXSpy is a Web shell. It has been modified by Threat Group-3390 actors to create
the ASPXTool version.
Information
MITRE ATT&CK Malpedia AlienVault OTX Last change to this tool card: 30 December 2022
Download this tool card in JSON format
All groups using tool ASPXSpy
Changed Name Country Observed
APT groups
 Agrius 2020-May 2023
 APT 41 2012-Jul 2025
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=71c01097-281f-4248-aba1-1084ab606b5e
Page 1 of 2

Chafer, APT 39 2014-Sep 2020
  Dalbit 2022  
  Emissary Panda, APT 27, LuckyMouse, Bronze Union 2010-Aug 2023  
  Gelsemium 2014-2023  
  Night Dragon 2009  
  TaskMasters 2010-May 2021  
  Turla, Waterbug, Venomous Bear 1996-2024  
  Volatile Cedar 2012-Early 2020  
10 groups listed (10 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=71c01097-281f-4248-aba1-1084ab606b5e
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=71c01097-281f-4248-aba1-1084ab606b5e
Page 2 of 2

APT groups Agrius  2020-May 2023
APT 41  2012-Jul 2025
 Page 1 of 2