PowerLess Backdoor - Threat Group Cards: A Threat Actor
Encyclopedia
Archived: 2026-04-05 14:41:45 UTC
Home > List all groups > List all tools > List all groups using tool PowerLess Backdoor
 Tool: PowerLess Backdoor
Names PowerLess Backdoor
Category Malware
Type Backdoor, Downloader, Info stealer, Keylogger
Description
(Cybereason) A novel and previously undocumented PowerShell backdoor related to the
Phosphorus group was discovered by the Cybereason Nocturnus Team and dubbed PowerLess
Backdoor. It supports downloading additional payloads, such as a keylogger and an info
stealer.
Information
Last change to this tool card: 06 March 2024
Download this tool card in JSON format
All groups using tool PowerLess Backdoor
Changed Name Country Observed
APT groups
 Magic Hound, APT 35, Cobalt Illusion, Charming Kitten 2012-Jun 2025
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=1f6197d2-281c-4a65-af06-c406ab70a97d
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=1f6197d2-281c-4a65-af06-c406ab70a97d
Page 1 of 1