Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-06 03:31:37 UTC
Home > List all groups > List all tools > List all groups using tool SmallTiger
 Tool: SmallTiger
Names SmallTiger
Category Malware
Type Backdoor
Description
(AhnLab) AhnLab SEcurity intelligence Center (ASEC) is responding to recently discovered
cases that are using the SmallTiger malware to attack South Korean businesses. The method of
initial access has not yet been identified, but the threat actor distributed SmallTiger into the
companies’ systems during the lateral movement phase. South Korean defense contractors,
automobile part manufacturers, and semiconductor manufacturers are some of the confirmed
targets.
Information Last change to this tool card: 28 December 2024
Download this tool card in JSON format
All groups using tool SmallTiger
Changed Name Country Observed
APT groups
 Kimsuky, Velvet Chollima 2012-Aug 2025
 Lazarus Group, Hidden Cobra, Labyrinth Chollima 2007-May 2025
2 groups listed (2 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=039cd345-33e3-40f5-aee5-c45540af4864
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=039cd345-33e3-40f5-aee5-c45540af4864
Page 1 of 1